
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft
File: 4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft (raw, json)
Hash identifier: x5+6hS15Zs2TNs67xqt/iaq/pz+/wO+gz6PwVufGJy8=
Subject key identifier: 0D:5C:2C:CE:03:4F:AD:7E:5A:3F:90:18:08:E4:91:FB:38:4F:97:14
Authority key identifier: 45:02:E6:3C:E0:1C:AD:23:9A:C3:97:BC:2B:B5:E6:C3:47:DC:EE:EA
Certificate issuer: /CN=4502e63ce01cad239ac397bc2bb5e6c347dceeea
Certificate serial: 2FC05CCAFF178228C270C272703B3D0212486190
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RQLmPOAcrSOaw5e8K7Xmw0fc7uo.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft
Manifest number: 051F
Signing time: Mon 06 Jul 2026 11:46:41 +0000
Manifest this update: Mon 06 Jul 2026 11:41:41 +0000
Manifest next update: Tue 07 Jul 2026 12:03:41 +0000
Files and hashes: 1: 326130323a313334383a3a2f33322d3332203d3e203531303539.roa (hash: idRPUwrCPZHjiSE/kH24rAzMczemZSkTsfWq1xPwh6Y=)
2: 3138352e322e3230372e302f32342d3234203d3e203531303539.roa (hash: qJwnVkbZQ0t6fnGyKN6cNCMCxJQWbGimR0QoYNVRTio=)
3: 3138352e322e3230342e302f32342d3234203d3e203531303539.roa (hash: WY6DP7ISPckKutj05yXj19aC18jEUDqW+vlyBEDzYR4=)
4: 3138352e322e3230362e302f32342d3234203d3e203531303539.roa (hash: 9tY5GTEVxta0324BfaE/zE6amu11uNt5gF70q3lDcAc=)
5: 3130392e3130372e33322e302f32302d3230203d3e203531303539.roa (hash: C9UfY9CKQ/OvFhFEQghP2qWXJbHFkU7nZrfnb9KHsRk=)
6: 2A2FB4DB0AA4D006958316872E467B554E0FD0BE.cer (hash: OcnJsnAo4CdRAC7bovVtlzwtakZNX8H8/1jz+FIMvfo=)
7: 3138352e322e3230352e302f32342d3234203d3e203531303539.roa (hash: 8NpNc3+Dg1dsLsrdjPPVYWcTafBhsK5m2leiu7R5m5o=)
8: 4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.crl (hash: 8IsYGSUhsdP++2+M4O4uggAO3DhLaLephs+O2btJ2vI=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.crl
rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft
rsync://rpki.ripe.net/repository/DEFAULT/RQLmPOAcrSOaw5e8K7Xmw0fc7uo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 07 Jul 2026 12:03:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2f:c0:5c:ca:ff:17:82:28:c2:70:c2:72:70:3b:3d:02:12:48:61:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4502e63ce01cad239ac397bc2bb5e6c347dceeea
Validity
Not Before: Jul 6 11:41:41 2026 GMT
Not After : Jul 7 12:03:41 2026 GMT
Subject: CN=0D5C2CCE034FAD7E5A3F901808E491FB384F9714
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:7d:68:6c:6d:b7:75:3f:58:e2:08:51:35:dd:
a6:1a:39:e2:a1:66:3e:2c:97:2e:3e:b7:89:37:b1:
d5:43:94:e3:10:c7:30:e1:8d:5f:7f:6f:50:be:0c:
6c:0e:ec:51:62:1f:17:cd:31:4c:09:86:b0:be:b1:
f3:9b:4f:eb:c0:19:44:60:14:cb:05:8e:a4:37:49:
83:80:be:eb:66:33:1f:78:6d:57:52:7f:c7:0e:04:
2c:60:56:78:85:70:08:a0:f0:9f:d3:de:49:f9:b7:
fa:d9:21:79:4b:a5:c8:16:a5:aa:66:e5:c5:2a:e2:
bc:6c:93:7a:7c:cf:01:74:9e:d9:c0:5b:cd:94:19:
ac:ff:6a:ae:ae:e0:3a:4d:b2:28:d7:c2:51:76:5a:
68:c2:ec:8b:7f:c9:3b:98:ee:50:4a:77:29:b1:f6:
6f:ba:ba:3f:ba:5a:d5:e5:71:5d:5a:ea:29:13:5a:
5e:4f:2f:9d:86:83:57:a1:d9:86:ba:e5:3f:de:d1:
6e:f2:d5:e0:41:95:b6:cd:fd:b7:59:0e:eb:88:46:
c6:5f:29:aa:29:c1:2b:5c:d3:30:a0:79:2c:c6:1f:
5d:3c:bd:bc:b0:4b:e5:ae:e4:7e:c4:1c:f5:d8:62:
cb:0a:24:2b:f9:27:54:1a:bf:52:5e:a4:ab:bc:60:
5f:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:5C:2C:CE:03:4F:AD:7E:5A:3F:90:18:08:E4:91:FB:38:4F:97:14
X509v3 Authority Key Identifier:
keyid:45:02:E6:3C:E0:1C:AD:23:9A:C3:97:BC:2B:B5:E6:C3:47:DC:EE:EA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RQLmPOAcrSOaw5e8K7Xmw0fc7uo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
94:e0:32:80:fa:44:21:9f:27:e3:65:5d:da:ec:0f:58:fa:4a:
e4:e5:ac:f5:22:60:ff:90:d0:8d:e8:7a:5a:90:ea:c1:e2:8d:
45:3f:fe:34:c4:34:c4:bd:87:12:3d:c2:a3:91:92:b5:f5:1d:
35:4b:4d:9f:a8:79:1d:20:a6:59:73:cd:55:d3:4d:cd:aa:55:
0a:f0:2f:1c:12:ad:ef:c5:3b:d5:f2:9e:10:bb:d8:d3:ce:91:
fe:ad:3b:d3:ac:f4:d7:52:8b:88:cc:42:39:fa:f9:23:07:9f:
ad:ee:af:75:12:83:1c:9c:c0:82:51:62:ca:8c:e6:62:20:4d:
6d:31:6c:6e:37:3e:b5:0b:03:5d:36:fb:05:49:07:0a:b3:c7:
17:8c:73:59:2a:f5:fe:d9:c1:7b:e0:46:c0:52:32:90:e7:53:
ba:7e:f4:0c:ad:c7:c0:71:1b:a5:41:eb:e0:5e:80:7e:f5:62:
99:84:58:c7:f8:47:15:4b:d2:62:c4:33:14:f2:28:65:26:6c:
80:b2:55:8f:69:54:64:ed:ae:41:d3:5e:a8:6d:c4:bb:54:d1:
33:d8:ef:2d:b0:21:fa:50:1c:49:39:98:05:5e:21:e8:aa:c6:
fa:92:ef:00:22:f2:5c:a2:08:44:54:dc:a6:ed:a1:f3:c0:68:
68:10:ba:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 7 03:16:43 2026 by rpki-client