
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft
File: 4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft (raw, json)
Hash identifier: 8ie9y01/e2aSDom+xFooTNXN6gD6iK8wfOgc7HYoEq0=
Subject key identifier: 26:F1:BC:5A:25:B5:69:13:FF:05:C1:45:42:FD:9C:58:30:ED:9B:8E
Authority key identifier: 45:02:E6:3C:E0:1C:AD:23:9A:C3:97:BC:2B:B5:E6:C3:47:DC:EE:EA
Certificate issuer: /CN=4502e63ce01cad239ac397bc2bb5e6c347dceeea
Certificate serial: 760BD36F565DC8919A3E6BAFCA0ECCB7429C39A4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RQLmPOAcrSOaw5e8K7Xmw0fc7uo.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft
Manifest number: 0484
Signing time: Wed 11 Mar 2026 18:49:30 +0000
Manifest this update: Wed 11 Mar 2026 18:44:30 +0000
Manifest next update: Thu 12 Mar 2026 19:32:30 +0000
Files and hashes: 1: 2A2FB4DB0AA4D006958316872E467B554E0FD0BE.cer (hash: QKOeJK2sWZOwn3ONUziDLsfn/UIwuJcjEwQlr5pjUqw=)
2: 3130392e3130372e33322e302f32302d3230203d3e203531303539.roa (hash: C9UfY9CKQ/OvFhFEQghP2qWXJbHFkU7nZrfnb9KHsRk=)
3: 4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.crl (hash: Pn4GDHpj5/Ge4cH2e4VLKt22Yw8MHZEh+rloAoHtDGY=)
4: 3138352e322e3230362e302f32342d3234203d3e203531303539.roa (hash: 9tY5GTEVxta0324BfaE/zE6amu11uNt5gF70q3lDcAc=)
5: 3138352e322e3230352e302f32342d3234203d3e203531303539.roa (hash: 8NpNc3+Dg1dsLsrdjPPVYWcTafBhsK5m2leiu7R5m5o=)
6: 326130323a313334383a3a2f33322d3332203d3e203531303539.roa (hash: idRPUwrCPZHjiSE/kH24rAzMczemZSkTsfWq1xPwh6Y=)
7: 3138352e322e3230342e302f32342d3234203d3e203531303539.roa (hash: WY6DP7ISPckKutj05yXj19aC18jEUDqW+vlyBEDzYR4=)
8: 3138352e322e3230372e302f32342d3234203d3e203531303539.roa (hash: qJwnVkbZQ0t6fnGyKN6cNCMCxJQWbGimR0QoYNVRTio=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.crl
rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft
rsync://rpki.ripe.net/repository/DEFAULT/RQLmPOAcrSOaw5e8K7Xmw0fc7uo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 12 Mar 2026 19:32:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
76:0b:d3:6f:56:5d:c8:91:9a:3e:6b:af:ca:0e:cc:b7:42:9c:39:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4502e63ce01cad239ac397bc2bb5e6c347dceeea
Validity
Not Before: Mar 11 18:44:30 2026 GMT
Not After : Mar 12 19:32:30 2026 GMT
Subject: CN=26F1BC5A25B56913FF05C14542FD9C5830ED9B8E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:d4:b5:c7:1b:bc:4c:85:88:6c:93:2c:8f:62:
3b:fd:04:32:1e:aa:b0:1e:95:19:12:03:08:4f:6e:
49:53:c4:f8:73:5c:63:3d:48:18:b2:f4:09:f4:5b:
ba:17:6e:55:70:d7:0d:a8:4a:86:0d:6e:70:7f:e9:
cf:6e:21:25:31:62:82:28:7b:83:d4:75:45:6d:d6:
df:96:09:a5:06:e6:82:b7:b2:b3:23:55:e3:82:a5:
d8:b0:5a:63:45:2d:31:2f:ef:5c:f5:1a:ed:31:9d:
70:5e:42:3a:50:f1:f5:ec:21:14:83:04:95:6a:3a:
e6:39:11:5e:b3:60:ba:cf:8a:11:35:bd:82:78:67:
72:b7:89:48:f7:78:0c:4c:e2:6d:50:8f:80:e9:52:
d2:b3:e9:f5:95:23:19:3c:af:fe:a1:3e:4e:f5:d9:
ba:e1:ac:ae:e4:83:8e:ba:5b:c8:be:4d:c4:32:f3:
bc:b6:62:61:d6:30:f0:e6:e3:f2:86:07:b5:00:94:
4c:21:1e:e7:a3:6a:b4:a8:3b:04:c4:d4:fd:07:9e:
da:8e:66:27:1c:12:5c:94:00:68:c7:a0:dc:38:d5:
80:a9:62:b1:76:3b:1b:23:15:56:2c:bd:a5:de:8c:
4e:e7:36:56:4b:63:c2:19:9f:cb:00:93:66:35:e9:
6d:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:F1:BC:5A:25:B5:69:13:FF:05:C1:45:42:FD:9C:58:30:ED:9B:8E
X509v3 Authority Key Identifier:
keyid:45:02:E6:3C:E0:1C:AD:23:9A:C3:97:BC:2B:B5:E6:C3:47:DC:EE:EA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RQLmPOAcrSOaw5e8K7Xmw0fc7uo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:f0:6d:8e:59:f8:c6:dc:9c:0e:78:70:f4:78:fd:92:15:5f:
57:5d:a5:3f:c6:65:4d:29:4b:eb:04:ae:8d:a2:08:d5:20:ee:
08:34:5c:81:3e:b9:80:98:80:95:fa:a9:f2:77:b4:c4:9a:0b:
52:e3:04:63:f5:3d:cd:97:88:29:ea:3e:eb:81:f0:2d:6e:0c:
00:56:a4:56:9d:e9:b8:23:0e:63:dd:4c:bb:21:88:0a:7c:e5:
b5:26:80:f2:83:7c:49:3c:cb:57:04:89:79:4d:2d:be:7e:a4:
b5:91:db:74:8d:41:22:e2:66:3d:2d:4c:62:19:73:2c:03:d2:
be:b3:53:25:7c:67:c7:5c:8d:75:f2:b1:ad:bb:3a:a8:0a:58:
aa:69:06:82:d7:17:df:08:d5:13:4a:46:bb:24:96:cf:58:d4:
fa:dd:2e:5b:58:69:79:b1:92:48:df:a8:fd:9c:8c:3f:fa:a2:
01:2d:76:ea:c2:77:a5:bc:41:94:b8:83:99:e7:a4:4c:3b:55:
8c:41:b3:41:1c:b5:f8:0e:cb:8e:d1:57:d1:40:43:e0:09:8f:
c6:6e:e2:34:d9:02:68:b2:2b:da:2d:16:b7:7d:84:55:88:07:
26:6d:45:1b:c6:1a:01:3d:77:ef:68:e3:b5:14:1e:b3:18:b6:
48:f1:44:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 12 04:50:53 2026 by rpki-client