
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft
File: 4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft (raw, json)
Hash identifier: 9C6OGK0YS/EUCI6rdazAawZKzWdnwEiPv2LrvBEpMPY=
Subject key identifier: 6D:BC:1C:D5:47:D9:52:C7:34:87:30:06:40:3A:31:D5:36:70:16:C1
Authority key identifier: 45:02:E6:3C:E0:1C:AD:23:9A:C3:97:BC:2B:B5:E6:C3:47:DC:EE:EA
Certificate issuer: /CN=4502e63ce01cad239ac397bc2bb5e6c347dceeea
Certificate serial: 69106CD26B50F96A1D5881038514F880DD03AD85
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RQLmPOAcrSOaw5e8K7Xmw0fc7uo.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft
Manifest number: 0526
Signing time: Sat 11 Jul 2026 17:06:41 +0000
Manifest this update: Sat 11 Jul 2026 17:01:41 +0000
Manifest next update: Sun 12 Jul 2026 20:18:41 +0000
Files and hashes: 1: 4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.crl (hash: +9LRzIvLAfpotbavD9eoF2uIL3mHq3Avlu0JO78MiGg=)
2: 326130323a313334383a3a2f33322d3332203d3e203531303539.roa (hash: idRPUwrCPZHjiSE/kH24rAzMczemZSkTsfWq1xPwh6Y=)
3: 3130392e3130372e33322e302f32302d3230203d3e203531303539.roa (hash: C9UfY9CKQ/OvFhFEQghP2qWXJbHFkU7nZrfnb9KHsRk=)
4: 3138352e322e3230342e302f32342d3234203d3e203531303539.roa (hash: WY6DP7ISPckKutj05yXj19aC18jEUDqW+vlyBEDzYR4=)
5: 3138352e322e3230362e302f32342d3234203d3e203531303539.roa (hash: 9tY5GTEVxta0324BfaE/zE6amu11uNt5gF70q3lDcAc=)
6: 3138352e322e3230352e302f32342d3234203d3e203531303539.roa (hash: 8NpNc3+Dg1dsLsrdjPPVYWcTafBhsK5m2leiu7R5m5o=)
7: 3138352e322e3230372e302f32342d3234203d3e203531303539.roa (hash: qJwnVkbZQ0t6fnGyKN6cNCMCxJQWbGimR0QoYNVRTio=)
8: 2A2FB4DB0AA4D006958316872E467B554E0FD0BE.cer (hash: OcnJsnAo4CdRAC7bovVtlzwtakZNX8H8/1jz+FIMvfo=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.crl
rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft
rsync://rpki.ripe.net/repository/DEFAULT/RQLmPOAcrSOaw5e8K7Xmw0fc7uo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 12 Jul 2026 20:18:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
69:10:6c:d2:6b:50:f9:6a:1d:58:81:03:85:14:f8:80:dd:03:ad:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4502e63ce01cad239ac397bc2bb5e6c347dceeea
Validity
Not Before: Jul 11 17:01:41 2026 GMT
Not After : Jul 12 20:18:41 2026 GMT
Subject: CN=6DBC1CD547D952C734873006403A31D5367016C1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:9b:e6:fb:71:e2:c2:aa:90:7e:b1:e3:dc:33:
7d:b2:bc:67:84:c5:2a:c8:40:27:4f:e5:ac:b4:a9:
28:d1:d0:f1:7e:28:36:50:49:11:8c:bd:3f:fa:9e:
bb:66:4d:66:e4:a3:b8:96:b6:eb:4f:8e:da:9e:51:
fb:a2:0c:55:3f:84:b9:75:c3:d8:09:3a:66:77:3f:
b6:93:4a:b1:15:08:66:c2:a0:9f:e1:52:13:eb:eb:
71:b4:bc:ec:c7:3f:5c:0c:a6:1e:34:cd:a6:10:be:
d9:db:82:f1:af:ea:47:39:eb:23:16:f7:2b:18:b4:
56:02:7d:67:8c:a6:fc:85:f6:4a:4c:0d:23:8b:af:
23:cc:98:fb:02:f9:25:df:96:ed:b1:13:c0:5c:8b:
3a:9c:bb:9f:86:51:a8:8c:79:c6:7b:0e:4f:76:88:
93:3b:1a:1f:73:26:bf:49:77:18:84:1b:39:40:48:
fc:32:73:da:56:f0:cb:2a:be:0b:dc:6a:12:ea:d3:
6e:ce:da:91:48:0b:bd:61:61:07:ce:37:5d:37:9e:
d9:57:e1:8b:56:d8:4e:a4:27:7e:a6:06:31:7d:97:
61:9e:ed:d6:ee:36:7d:ee:df:f5:98:3c:ee:c6:2d:
ad:84:e9:9b:ef:75:13:cc:b9:e5:20:b8:6c:cc:20:
d6:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:BC:1C:D5:47:D9:52:C7:34:87:30:06:40:3A:31:D5:36:70:16:C1
X509v3 Authority Key Identifier:
keyid:45:02:E6:3C:E0:1C:AD:23:9A:C3:97:BC:2B:B5:E6:C3:47:DC:EE:EA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RQLmPOAcrSOaw5e8K7Xmw0fc7uo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:cd:a7:4f:eb:44:5c:87:a6:6a:31:5a:62:d9:52:12:7c:a2:
67:10:ba:0e:ea:c3:3e:ab:b7:9b:f8:42:79:cc:6f:be:b4:df:
93:48:f2:d8:1e:3b:43:b4:2c:e5:9f:b6:dd:b0:a4:dd:e9:d2:
e3:fc:23:ae:27:f2:ee:c4:be:38:59:07:21:d3:ef:11:61:6c:
3c:e5:da:9b:95:06:a6:98:51:39:e3:8f:54:43:86:f3:1e:cb:
16:fa:4d:ad:da:18:9b:32:5d:5c:1b:e6:70:d3:7e:b9:93:52:
09:69:19:7d:71:ce:0f:5b:10:b2:be:13:83:fd:99:0c:8a:db:
30:bd:a2:e8:e8:3e:a6:d4:3d:e8:81:c2:b9:8c:90:18:6c:fd:
bd:39:b5:6e:3c:ea:5c:04:a7:d8:79:77:28:f9:a4:c6:7c:91:
ff:eb:37:e0:c3:6e:d0:cf:f5:8a:3e:fb:8a:9c:37:88:03:50:
56:8c:10:26:54:5d:db:57:a0:b6:f3:e5:f6:32:31:8e:42:97:
56:08:6c:cf:b0:76:da:36:b7:c6:44:30:90:da:10:ef:26:50:
21:15:c6:33:87:bb:c1:e7:7e:16:2d:13:2f:3c:b5:41:2e:6e:
15:3c:1f:f2:99:9a:8e:7a:ed:5f:49:31:a5:23:fd:03:60:af:
2c:6b:d4:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 12 07:57:37 2026 by rpki-client