Manifest
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/4bfa7a9f-28d3-45b0-a839-a57519ecaeae/0/C3F4E167A6B1633379B9981D8A565B7AFB81DC90.mft
File: C3F4E167A6B1633379B9981D8A565B7AFB81DC90.mft (raw, json)
Hash identifier: EG8U8G+rf/Ig+DpvSW/2ItDCsIxxj/dt4F3cvJ4ag3Y=
Subject key identifier: 6A:81:63:44:17:71:0B:B8:24:F7:2F:6F:A4:92:31:DD:32:36:D7:49
Authority key identifier: C3:F4:E1:67:A6:B1:63:33:79:B9:98:1D:8A:56:5B:7A:FB:81:DC:90
Certificate issuer: /CN=c3f4e167a6b1633379b9981d8a565b7afb81dc90
Certificate serial: 26A318336AD8EC09F84B21001BAD10132937C957
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w_ThZ6axYzN5uZgdilZbevuB3JA.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/4bfa7a9f-28d3-45b0-a839-a57519ecaeae/0/C3F4E167A6B1633379B9981D8A565B7AFB81DC90.mft
Manifest number: 5E
Signing time: Mon 02 Mar 2026 08:57:30 +0000
Manifest this update: Mon 02 Mar 2026 08:52:30 +0000
Manifest next update: Tue 03 Mar 2026 11:19:30 +0000
Files and hashes: 1: C3F4E167A6B1633379B9981D8A565B7AFB81DC90.crl (hash: ixcEEQXCAbZAhbZB9MdYfhKhpGSP9ALESPB8UIIfg4U=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/4bfa7a9f-28d3-45b0-a839-a57519ecaeae/0/C3F4E167A6B1633379B9981D8A565B7AFB81DC90.crl
rsync://rsync.paas.rpki.ripe.net/repository/4bfa7a9f-28d3-45b0-a839-a57519ecaeae/0/C3F4E167A6B1633379B9981D8A565B7AFB81DC90.mft
rsync://rpki.ripe.net/repository/DEFAULT/w_ThZ6axYzN5uZgdilZbevuB3JA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 09:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
26:a3:18:33:6a:d8:ec:09:f8:4b:21:00:1b:ad:10:13:29:37:c9:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c3f4e167a6b1633379b9981d8a565b7afb81dc90
Validity
Not Before: Mar 2 08:52:30 2026 GMT
Not After : Mar 3 11:19:30 2026 GMT
Subject: CN=6A81634417710BB824F72F6FA49231DD3236D749
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:f0:22:63:60:df:25:57:48:43:f3:b5:75:9a:
6c:d7:c6:68:b3:41:e0:99:b3:6b:ff:fd:a9:a6:11:
83:b3:6e:7d:d6:4e:01:97:d0:60:5c:83:f7:0a:4a:
e1:fe:40:8e:8d:7c:7e:d7:b4:71:e3:18:f2:bc:a3:
88:dc:e0:be:06:4a:63:5b:c1:fb:d2:c5:d4:2c:da:
4e:17:54:a9:dc:36:bc:96:81:d4:3e:d4:ce:04:e9:
5c:64:6c:d1:ae:c3:30:dd:fd:63:c4:ef:71:0c:f6:
3a:5a:91:29:cb:40:c1:d6:6f:b2:16:c1:56:f6:f8:
02:6d:aa:68:d4:e8:02:34:a8:9d:1f:8a:b2:93:a9:
59:3c:0b:95:68:a8:b6:bd:d3:dd:c8:22:4e:d0:3f:
8e:21:e0:4e:d7:d0:a9:38:86:c5:12:f0:96:fc:48:
e3:f2:89:1d:ec:ee:cf:38:e9:98:fb:a6:73:f2:e7:
f8:3f:17:fd:1f:97:72:db:cb:f9:77:41:19:ac:52:
e3:f4:17:e7:79:65:21:44:b6:1f:1c:f3:f2:72:7c:
20:ae:e9:4e:3e:52:ef:3c:59:a1:c6:07:d7:b8:5d:
ac:2e:bf:bd:33:1d:44:96:84:28:23:80:0c:6e:e5:
3e:c8:70:4a:ad:ed:da:7d:cd:8f:ab:3e:91:14:a5:
3b:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:81:63:44:17:71:0B:B8:24:F7:2F:6F:A4:92:31:DD:32:36:D7:49
X509v3 Authority Key Identifier:
keyid:C3:F4:E1:67:A6:B1:63:33:79:B9:98:1D:8A:56:5B:7A:FB:81:DC:90
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/4bfa7a9f-28d3-45b0-a839-a57519ecaeae/0/C3F4E167A6B1633379B9981D8A565B7AFB81DC90.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w_ThZ6axYzN5uZgdilZbevuB3JA.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/4bfa7a9f-28d3-45b0-a839-a57519ecaeae/0/C3F4E167A6B1633379B9981D8A565B7AFB81DC90.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:d7:58:6f:fb:ec:59:24:8a:76:3c:e2:49:1b:fb:40:f1:ce:
59:aa:c4:50:bf:54:93:1b:36:c5:c9:36:49:53:f0:71:a7:72:
d6:72:d4:a1:c1:a6:57:8f:4b:36:30:ea:0d:d5:4c:0a:af:4d:
d8:c4:10:21:45:f5:dc:99:7d:89:4e:0d:fe:58:fb:26:ee:f8:
2a:b4:39:d8:6e:b4:6e:3f:9f:94:02:04:1a:67:38:c1:8e:10:
20:cd:36:41:9b:1a:ce:62:28:ac:a3:e1:66:6b:85:a6:2e:8a:
ee:58:e7:cb:d0:50:c6:a6:0d:e6:da:df:75:6f:34:8a:c5:88:
86:6c:4e:12:c0:9e:e5:a2:fc:75:ff:52:52:0c:4b:c0:e8:b0:
9f:cd:d5:38:2c:b0:3a:7c:71:53:e2:57:3c:4b:37:23:f5:78:
36:95:85:20:a3:ff:cc:67:20:05:a1:5d:e7:a0:fd:73:de:70:
76:df:48:83:af:84:80:34:98:a5:86:b2:cc:69:9c:9c:9b:a3:
8f:dd:66:22:5c:7e:4a:28:1f:ed:1a:79:3e:14:22:dc:70:1f:
d1:af:fa:e3:10:40:09:b3:be:76:d2:56:fa:93:05:b2:81:26:
92:ab:f0:46:62:db:c7:74:e6:c7:15:8e:ef:4b:ad:89:35:2e:
d7:41:ec:aa
-----BEGIN CERTIFICATE-----
MIIFPTCCBCWgAwIBAgIUJqMYM2rY7An4SyEAG60QEyk3yVcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYzNmNGUxNjdhNmIxNjMzMzc5Yjk5ODFkOGE1NjViN2Fm
YjgxZGM5MDAeFw0yNjAzMDIwODUyMzBaFw0yNjAzMDMxMTE5MzBaMDMxMTAvBgNV
BAMTKDZBODE2MzQ0MTc3MTBCQjgyNEY3MkY2RkE0OTIzMUREMzIzNkQ3NDkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDh8CJjYN8lV0hD87V1mmzXxmiz
QeCZs2v//ammEYOzbn3WTgGX0GBcg/cKSuH+QI6NfH7XtHHjGPK8o4jc4L4GSmNb
wfvSxdQs2k4XVKncNryWgdQ+1M4E6VxkbNGuwzDd/WPE73EM9jpakSnLQMHWb7IW
wVb2+AJtqmjU6AI0qJ0firKTqVk8C5VoqLa9093IIk7QP44h4E7X0Kk4hsUS8Jb8
SOPyiR3s7s846Zj7pnPy5/g/F/0fl3Lby/l3QRmsUuP0F+d5ZSFEth8c8/JyfCCu
6U4+Uu88WaHGB9e4Xawuv70zHUSWhCgjgAxu5T7IcEqt7dp9zY+rPpEUpTvpAgMB
AAGjggJHMIICQzAdBgNVHQ4EFgQUaoFjRBdxC7gk9y9vpJIx3TI210kwHwYDVR0j
BBgwFoAUw/ThZ6axYzN5uZgdilZbevuB3JAwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvNGJmYTdhOWYtMjhkMy00NWIwLWE4MzktYTU3NTE5ZWNh
ZWFlLzAvQzNGNEUxNjdBNkIxNjMzMzc5Qjk5ODFEOEE1NjVCN0FGQjgxREM5MC5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3dfVGhaNmF4WXpONXVaZ2RpbFpiZXZ1
QjNKQS5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6
Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS80YmZhN2E5Zi0y
OGQzLTQ1YjAtYTgzOS1hNTc1MTllY2FlYWUvMC9DM0Y0RTE2N0E2QjE2MzMzNzlC
OTk4MUQ4QTU2NUI3QUZCODFEQzkwLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF
Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH
AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAj9dYb/vsWSSKdjziSRv7
QPHOWarEUL9Ukxs2xck2SVPwcady1nLUocGmV49LNjDqDdVMCq9N2MQQIUX13Jl9
iU4N/lj7Ju74KrQ52G60bj+flAIEGmc4wY4QIM02QZsazmIorKPhZmuFpi6K7ljn
y9BQxqYN5trfdW80isWIhmxOEsCe5aL8df9SUgxLwOiwn83VOCywOnxxU+JXPEs3
I/V4NpWFIKP/zGcgBaFd56D9c95wdt9Ig6+EgDSYpYayzGmcnJujj91mIlx+Sigf
7Rp5PhQi3HAf0a/64xBACbO+dtJW+pMFsoEmkqvwRmLbx3TmxxWO70utiTUu10Hs
qg==
-----END CERTIFICATE-----
Generated at Mon Mar 2 12:36:57 2026 by rpki-client