
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/933b2fd7-31c1-451c-8288-c1aa0aa12750/0/45E8648E445DCCD0D8EE699F5140BB814E43AE1B.mft
File: 45E8648E445DCCD0D8EE699F5140BB814E43AE1B.mft (raw, json)
Hash identifier: G7ltFpZU3+uv8IgFxexyLFZ60k9NqUrGHiGL03Ftxi0=
Subject key identifier: 84:A4:AA:DF:DB:24:7D:1F:77:E8:E6:52:C7:65:66:0E:B8:F2:99:C4
Authority key identifier: 45:E8:64:8E:44:5D:CC:D0:D8:EE:69:9F:51:40:BB:81:4E:43:AE:1B
Certificate issuer: /CN=45e8648e445dccd0d8ee699f5140bb814e43ae1b
Certificate serial: 5F9AC6C29EC79798C1C054DB05DB4567CCD6CF0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RehkjkRdzNDY7mmfUUC7gU5Drhs.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/933b2fd7-31c1-451c-8288-c1aa0aa12750/0/45E8648E445DCCD0D8EE699F5140BB814E43AE1B.mft
Manifest number: 025C
Signing time: Tue 05 May 2026 18:16:17 +0000
Manifest this update: Tue 05 May 2026 18:11:17 +0000
Manifest next update: Wed 06 May 2026 19:32:17 +0000
Files and hashes: 1: 3139342e32362e32312e302f32342d3234203d3e2036303739.roa (hash: C+pqIVBYxtX1Vf4vHbq3YBGNZtxuHmXXj5v6GlxMx88=)
2: 3138352e33392e3138302e302f32342d3234203d3e203438353932.roa (hash: ZWyLSTcE9mAQsDVjLP4sbforwwRF0gy7YQkGUCm2B9s=)
3: 3139342e32362e322e302f32342d3234203d3e2036303739.roa (hash: TjtnNTn7FpO9sB3IOcWEqbyB3qNOxAYh9NFcoqi1238=)
4: 3139342e32362e332e302f32342d3234203d3e20343031313930.roa (hash: LIKAmocMMAfJYEkBfDTJGvC18ZVuFHLl0Op0JOVO1hY=)
5: 3138352e33392e3138322e302f32342d3234203d3e203438353932.roa (hash: 2GU98PVW8A06wPHFP07dWrMXh03+0FNfaArisd+625g=)
6: 3138352e33392e3138332e302f32342d3234203d3e203438353932.roa (hash: 5y1BpEcUWIqqauwo2u2KJKPFMCa0JPAhvtiDqGTVDHw=)
7: 3231322e34372e33362e302f32342d3234203d3e2039333138.roa (hash: ZVXQWb7gEfqAkq16Ky0ZSqFCIZ2vC/M8/7YAMrFhXy0=)
8: 3139342e32362e322e302f32342d3234203d3e2037303138.roa (hash: ipi0vAcQv2svi+muK542zHAIeeVH19r0pk+yh9NadUY=)
9: 37372e38312e38322e302f32342d3234203d3e203438353932.roa (hash: d5TxhwAkeXwrF6uRbXxfjKGJfxHDWIa7sLTALcjfvN4=)
10: 3139342e32362e32302e302f32342d3234203d3e20323132323338.roa (hash: YP/VU7Ddy/RINA1ejeDsmhFrZUIqFHueTf4iQvV7+Jw=)
11: 3139342e32362e32312e302f32342d3234203d3e2037303138.roa (hash: kBcBHXRMQfVwN+zg5BZ4LCUyMZ6cS1mQp15ihx19Joc=)
12: 37372e38312e37362e302f32342d3234203d3e203438353932.roa (hash: xdM7OBZ/9TbpR6di66FXGgK7azfT3ftRTjEe6Yt/SjQ=)
13: 45E8648E445DCCD0D8EE699F5140BB814E43AE1B.crl (hash: pITToUxqfeVbROiQxMhHgq77tIVu97jl7RcBdrNXh60=)
14: 3139342e32362e32312e302f32342d3234203d3e2035363530.roa (hash: p78KH8kgcBRXXFcw1mzLGQ6wEbtzI8eA56dk/vajAYc=)
15: 3139332e3234362e3136352e302f32342d3234203d3e20343031323935.roa (hash: /MCjD1gKf8dM428+AJBa7D2BqNWXl/86u8uSaT3JFm0=)
16: 3139342e32362e322e302f32342d3234203d3e2035363530.roa (hash: ZRXlceutGr+HdF7VzH6TN3nc+64+GLWiw3p0vss7mZQ=)
17: 3138352e33392e3138312e302f32342d3234203d3e203438353932.roa (hash: wPa88HthyMje0FC4DyK9XcGEOLxJkylfsOcQDqr+i80=)
18: 37372e38312e37392e302f32342d3234203d3e20343031383338.roa (hash: jqhfslJN0nyOj/30XxhLZVefzpoYoh0e1/irmr4G57s=)
19: 3132382e36352e3136302e302f32322d3232203d3e203438353932.roa (hash: A3pVDR25ByDI5MeiQGGyctYtEVKjmHED5jwJjMlcbk4=)
20: 37372e38312e37392e302f32342d3234203d3e2037303138.roa (hash: QouC5FWUBHtZ4E7QwYAk/YLY1LKZrC4sUpRgQ8vSbSQ=)
21: 3139342e32362e32312e302f32342d3234203d3e20343031383338.roa (hash: W6OrrdK1OeSj0zhiikePRhbHjS9VOD7qyg5G4TQyO4k=)
22: 37372e38312e37392e302f32342d3234203d3e2036303739.roa (hash: u0uKpeiU5ZpBWUsg2bqVMuJ+xilyXQyIO7XWxfYa1xw=)
23: 37372e38312e37392e302f32342d3234203d3e2035363530.roa (hash: chtAnXZi5q6GRUxpR5xO2uIiP96tdCrOBTIeDsoa8hE=)
24: 37372e38312e37372e302f32342d3234203d3e203438323636.roa (hash: 5I0vOu7kvIMlEY7Sq8XZtvSWHaZxS4B46RvJVyxx8WI=)
25: 3132382e36352e3136342e302f32322d3232203d3e2033333230.roa (hash: MdPKw7OONGYXcOZWO/o2hEi1vtA1V+k+wu8N5c3I5aE=)
26: 3138382e3231342e3233322e302f32332d3234203d3e2035303635.roa (hash: x3PmGOoet0cDs7+uuyuNJtaOTgdNjDt0p0iGeQg4oNo=)
27: 37372e38312e38332e302f32342d3234203d3e203438353932.roa (hash: Tv5q+rfM3afhLe0aBDFGLWT8PXWC4GLzMQF3H6VLFL8=)
28: 37372e38312e37382e302f32342d3234203d3e203438353932.roa (hash: 5R59EysS9tL6UTIvemaJCrtszj6x6/cuKApXJ2KN9Lk=)
29: 3139342e32362e322e302f32342d3234203d3e20343031383338.roa (hash: hww+5Hf4jmFo7Au813kPo2lBtFDkf7ALOlVDrCFDow8=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/933b2fd7-31c1-451c-8288-c1aa0aa12750/0/45E8648E445DCCD0D8EE699F5140BB814E43AE1B.crl
rsync://rsync.paas.rpki.ripe.net/repository/933b2fd7-31c1-451c-8288-c1aa0aa12750/0/45E8648E445DCCD0D8EE699F5140BB814E43AE1B.mft
rsync://rpki.ripe.net/repository/DEFAULT/RehkjkRdzNDY7mmfUUC7gU5Drhs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 May 2026 13:57:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5f:9a:c6:c2:9e:c7:97:98:c1:c0:54:db:05:db:45:67:cc:d6:cf:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=45e8648e445dccd0d8ee699f5140bb814e43ae1b
Validity
Not Before: May 5 18:11:17 2026 GMT
Not After : May 6 19:32:17 2026 GMT
Subject: CN=84A4AADFDB247D1F77E8E652C765660EB8F299C4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:0a:2d:c7:86:bb:2a:4e:c4:58:25:14:7c:18:
2b:da:5b:54:a1:70:a9:ee:62:f6:a9:bf:3a:e9:7b:
b4:31:3f:09:ad:56:e0:95:24:53:15:f0:8e:54:1f:
75:3d:ed:05:f3:99:4f:cd:d9:74:b5:1d:51:fe:74:
07:36:af:86:1e:c6:e5:73:f3:42:a0:1f:47:e6:38:
be:d2:6a:5e:f9:3d:fa:c0:b4:c3:28:19:d6:b1:69:
bd:cd:02:dd:df:00:8d:61:1c:f2:2f:1f:f6:66:9c:
7d:bc:d2:be:4c:61:d3:44:bf:41:28:f9:6d:4a:a9:
6b:e8:81:38:6a:99:90:5d:c0:95:9f:79:20:b1:6e:
9d:a0:3b:a9:9f:0e:b9:60:e7:3c:9f:39:b6:55:b8:
61:de:70:17:9d:7d:22:19:6e:00:c5:1a:4f:e5:1b:
08:39:20:d2:f4:3c:cd:79:47:8a:e8:d1:aa:a2:52:
c9:bc:36:90:f5:b9:39:7c:8e:1d:48:48:e0:13:31:
df:c7:63:3e:6f:5d:15:29:2b:c0:5b:9f:6d:69:9d:
19:8e:a4:7c:78:84:03:ae:75:d1:20:92:17:d3:33:
5e:2b:00:ac:d7:c5:94:ad:d1:6b:a1:b8:4a:46:58:
65:6c:fe:97:23:51:a9:62:8b:94:a3:9c:1d:03:3d:
3b:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:A4:AA:DF:DB:24:7D:1F:77:E8:E6:52:C7:65:66:0E:B8:F2:99:C4
X509v3 Authority Key Identifier:
keyid:45:E8:64:8E:44:5D:CC:D0:D8:EE:69:9F:51:40:BB:81:4E:43:AE:1B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/933b2fd7-31c1-451c-8288-c1aa0aa12750/0/45E8648E445DCCD0D8EE699F5140BB814E43AE1B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RehkjkRdzNDY7mmfUUC7gU5Drhs.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/933b2fd7-31c1-451c-8288-c1aa0aa12750/0/45E8648E445DCCD0D8EE699F5140BB814E43AE1B.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:df:29:25:1d:78:5d:c4:93:de:cd:0e:a6:e9:73:8b:27:f9:
64:41:3d:d6:cb:b7:55:8d:72:14:5e:dd:1f:38:5f:d5:83:5a:
dd:7b:c5:52:3c:93:fa:32:f4:7d:bd:6e:6d:5a:9e:cd:ba:bb:
a0:e1:a4:01:04:d3:07:3f:28:53:3b:21:b2:52:ae:f7:48:b3:
13:3a:63:c6:0f:bb:0f:28:85:2e:f8:29:ba:81:ac:0d:11:80:
93:58:55:16:87:5c:e7:71:13:a5:95:f8:a2:46:7d:a6:32:f4:
c9:86:87:97:81:5d:de:92:48:d6:25:8e:f1:9e:ef:83:43:c6:
e2:ea:22:21:2c:76:86:71:c0:b0:2b:ba:a7:e9:a4:5a:bf:57:
ba:e9:bf:20:91:5a:d2:84:6d:a7:4e:35:4f:7a:8f:d5:68:37:
9e:ef:1e:55:f2:83:05:00:01:59:eb:14:ce:67:3f:99:7b:b4:
78:93:e8:c1:72:26:a3:0f:82:e6:db:f6:a2:05:0a:44:20:ad:
9c:03:98:5a:50:cc:3d:71:a1:a3:15:73:2d:73:97:a9:b7:6f:
c3:97:02:cc:d9:0d:9b:d5:7a:de:45:30:8e:43:f1:58:ad:0d:
cf:12:89:97:f2:8a:53:9c:18:b9:49:c5:82:1a:56:98:8a:08:
57:56:c5:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 5 20:11:59 2026 by rpki-client