
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft
File: 4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft (raw, json)
Hash identifier: aBvIq2MdHoX3l3HOx4Ilk2G/DHplfDbITTdDtgt7RBU=
Subject key identifier: 25:BA:5D:CE:4D:7B:E7:57:6D:1A:44:44:21:6F:20:B2:63:5C:B9:28
Authority key identifier: 45:02:E6:3C:E0:1C:AD:23:9A:C3:97:BC:2B:B5:E6:C3:47:DC:EE:EA
Certificate issuer: /CN=4502e63ce01cad239ac397bc2bb5e6c347dceeea
Certificate serial: 461A84767457C2C64F3FA4705ACCD148BF5D91BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RQLmPOAcrSOaw5e8K7Xmw0fc7uo.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft
Manifest number: 04E4
Signing time: Fri 22 May 2026 13:28:19 +0000
Manifest this update: Fri 22 May 2026 13:23:19 +0000
Manifest next update: Sat 23 May 2026 17:18:19 +0000
Files and hashes: 1: 4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.crl (hash: lDQ4TazUxMrjPsfqBSOAH3vTBK6h4Nu//iFwO7CsuzE=)
2: 326130323a313334383a3a2f33322d3332203d3e203531303539.roa (hash: idRPUwrCPZHjiSE/kH24rAzMczemZSkTsfWq1xPwh6Y=)
3: 3138352e322e3230352e302f32342d3234203d3e203531303539.roa (hash: 8NpNc3+Dg1dsLsrdjPPVYWcTafBhsK5m2leiu7R5m5o=)
4: 3138352e322e3230342e302f32342d3234203d3e203531303539.roa (hash: WY6DP7ISPckKutj05yXj19aC18jEUDqW+vlyBEDzYR4=)
5: 3130392e3130372e33322e302f32302d3230203d3e203531303539.roa (hash: C9UfY9CKQ/OvFhFEQghP2qWXJbHFkU7nZrfnb9KHsRk=)
6: 3138352e322e3230362e302f32342d3234203d3e203531303539.roa (hash: 9tY5GTEVxta0324BfaE/zE6amu11uNt5gF70q3lDcAc=)
7: 3138352e322e3230372e302f32342d3234203d3e203531303539.roa (hash: qJwnVkbZQ0t6fnGyKN6cNCMCxJQWbGimR0QoYNVRTio=)
8: 2A2FB4DB0AA4D006958316872E467B554E0FD0BE.cer (hash: OcnJsnAo4CdRAC7bovVtlzwtakZNX8H8/1jz+FIMvfo=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.crl
rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft
rsync://rpki.ripe.net/repository/DEFAULT/RQLmPOAcrSOaw5e8K7Xmw0fc7uo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 May 2026 17:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
46:1a:84:76:74:57:c2:c6:4f:3f:a4:70:5a:cc:d1:48:bf:5d:91:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4502e63ce01cad239ac397bc2bb5e6c347dceeea
Validity
Not Before: May 22 13:23:19 2026 GMT
Not After : May 23 17:18:19 2026 GMT
Subject: CN=25BA5DCE4D7BE7576D1A4444216F20B2635CB928
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:0c:97:7a:a6:4e:ff:9e:c1:0f:ba:0a:4d:cc:
90:0b:4e:5a:e5:26:d6:e1:c2:8f:4a:c6:85:55:65:
43:e2:05:87:fc:f0:bf:09:7a:91:b5:2a:6f:eb:15:
d5:a5:90:58:e6:fb:e5:90:9c:87:68:78:81:a8:6e:
f4:0b:34:ad:c0:96:f7:69:96:4e:72:9e:96:ba:3e:
43:20:d6:20:9d:08:fb:23:9c:ae:17:df:73:c5:ea:
83:ce:9b:22:16:1e:29:b9:f3:e9:7c:e3:63:d8:4c:
a5:f9:17:28:c6:ac:d7:76:ea:4c:b6:f6:bd:a9:b3:
84:fd:8b:ec:9d:6c:7f:a4:24:bc:d8:58:5b:26:ff:
70:0e:0d:15:7f:50:f1:2a:fb:37:e2:54:00:97:29:
64:38:c0:74:31:9e:49:33:85:84:d6:4f:a5:58:ff:
11:fb:26:e0:4b:b2:bb:53:18:bd:62:bb:31:4b:12:
f9:b7:d2:47:72:99:13:e3:b7:00:74:da:e2:35:a6:
aa:5a:92:72:61:c8:d3:6a:75:da:d9:8f:33:cf:37:
0e:3a:a2:7a:44:89:3d:bd:3e:df:8e:a3:5d:02:0e:
44:1d:3e:33:41:ab:45:2a:61:74:0b:3b:71:5c:2d:
a1:b7:08:96:e3:bd:89:38:91:f5:86:9c:c0:1e:db:
32:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:BA:5D:CE:4D:7B:E7:57:6D:1A:44:44:21:6F:20:B2:63:5C:B9:28
X509v3 Authority Key Identifier:
keyid:45:02:E6:3C:E0:1C:AD:23:9A:C3:97:BC:2B:B5:E6:C3:47:DC:EE:EA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RQLmPOAcrSOaw5e8K7Xmw0fc7uo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:c5:a0:cf:2f:e9:a5:6b:c5:74:4a:81:9c:c7:46:cc:06:25:
ea:9f:4c:dd:87:f5:f3:b3:fe:0e:a0:5e:aa:d4:56:02:20:29:
e2:78:05:6a:0c:69:48:78:d9:cb:cd:1a:b1:b0:f9:ef:18:ba:
7e:7b:d0:75:a5:37:e1:cb:62:bb:cf:bf:ea:3c:ce:d1:77:50:
7d:bb:28:fe:e2:f7:eb:b5:a2:74:be:45:81:5e:7d:a9:7f:3c:
74:d5:e7:8d:12:28:7a:03:45:85:97:3a:8d:6f:69:a2:e7:06:
d9:5f:ae:0a:81:50:41:7a:a9:9e:b8:92:3d:72:00:c1:4a:b6:
17:3d:f9:ec:a6:2e:e4:5f:0e:c2:93:cc:ee:30:b5:7f:62:7c:
e1:13:7b:64:08:9e:84:e1:ae:17:52:98:bd:c1:eb:68:fc:7e:
14:f6:b9:e7:e1:b1:a0:91:bb:47:e0:f5:ff:62:14:1f:9b:80:
5a:4a:97:2d:39:b0:b5:07:79:86:c6:80:4b:78:5b:fb:15:62:
66:dd:1f:15:e3:da:e4:2d:1d:ec:e5:cc:da:2b:c2:f0:08:b8:
31:06:dc:8e:3d:f1:2f:50:cf:98:71:77:3b:50:7f:6f:0c:8e:
63:a7:42:ee:85:80:88:60:3d:a0:d9:16:32:0f:60:18:8c:63:
f1:64:7f:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 22 21:39:25 2026 by rpki-client