
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft
File: 4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft (raw, json)
Hash identifier: 7pc8BXv8A1lCOy4U7zk1XQjkf1XVLI9C4lZog3qBhjU=
Subject key identifier: EF:42:BB:06:7E:4F:F6:55:02:D7:23:9C:9D:48:9D:FE:D0:9F:C2:61
Authority key identifier: 45:02:E6:3C:E0:1C:AD:23:9A:C3:97:BC:2B:B5:E6:C3:47:DC:EE:EA
Certificate issuer: /CN=4502e63ce01cad239ac397bc2bb5e6c347dceeea
Certificate serial: 4F5EE04A551C0CA782A87EB2E3568CD42E4762AC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RQLmPOAcrSOaw5e8K7Xmw0fc7uo.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft
Manifest number: 051E
Signing time: Sun 05 Jul 2026 18:33:14 +0000
Manifest this update: Sun 05 Jul 2026 18:28:14 +0000
Manifest next update: Mon 06 Jul 2026 19:43:14 +0000
Files and hashes: 1: 3138352e322e3230342e302f32342d3234203d3e203531303539.roa (hash: WY6DP7ISPckKutj05yXj19aC18jEUDqW+vlyBEDzYR4=)
2: 3138352e322e3230352e302f32342d3234203d3e203531303539.roa (hash: 8NpNc3+Dg1dsLsrdjPPVYWcTafBhsK5m2leiu7R5m5o=)
3: 2A2FB4DB0AA4D006958316872E467B554E0FD0BE.cer (hash: OcnJsnAo4CdRAC7bovVtlzwtakZNX8H8/1jz+FIMvfo=)
4: 3138352e322e3230362e302f32342d3234203d3e203531303539.roa (hash: 9tY5GTEVxta0324BfaE/zE6amu11uNt5gF70q3lDcAc=)
5: 4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.crl (hash: Jck0VMmHAfWDXoyNo33KLBvkk/DNdgoR26qjoCyNeL0=)
6: 326130323a313334383a3a2f33322d3332203d3e203531303539.roa (hash: idRPUwrCPZHjiSE/kH24rAzMczemZSkTsfWq1xPwh6Y=)
7: 3138352e322e3230372e302f32342d3234203d3e203531303539.roa (hash: qJwnVkbZQ0t6fnGyKN6cNCMCxJQWbGimR0QoYNVRTio=)
8: 3130392e3130372e33322e302f32302d3230203d3e203531303539.roa (hash: C9UfY9CKQ/OvFhFEQghP2qWXJbHFkU7nZrfnb9KHsRk=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.crl
rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft
rsync://rpki.ripe.net/repository/DEFAULT/RQLmPOAcrSOaw5e8K7Xmw0fc7uo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 06 Jul 2026 17:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4f:5e:e0:4a:55:1c:0c:a7:82:a8:7e:b2:e3:56:8c:d4:2e:47:62:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4502e63ce01cad239ac397bc2bb5e6c347dceeea
Validity
Not Before: Jul 5 18:28:14 2026 GMT
Not After : Jul 6 19:43:14 2026 GMT
Subject: CN=EF42BB067E4FF65502D7239C9D489DFED09FC261
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:61:f2:31:5e:ca:eb:ba:bc:14:7a:9f:fc:57:
50:bd:12:fd:ce:a7:f9:24:fa:8a:f9:26:88:47:36:
6f:5e:8a:d8:97:4c:52:31:71:72:da:17:f6:93:f8:
50:5c:10:14:68:3c:93:d5:fa:d3:c7:0b:47:7d:63:
e7:a9:73:01:66:e9:d2:cb:53:33:a2:d8:14:0b:15:
bb:e6:03:80:6c:13:91:15:5a:10:f8:24:46:e6:d3:
13:6a:96:57:8f:49:9c:85:db:51:4a:7e:d8:7e:a6:
36:40:db:bc:c2:4a:f9:8c:13:d9:f0:5c:48:b1:30:
47:26:59:69:98:89:48:8c:f1:79:25:c5:77:cb:ba:
11:fa:a8:f0:f7:59:cb:1c:fb:18:90:57:c4:78:85:
8f:59:ae:b7:6d:48:91:e5:8c:cc:1b:0d:56:7f:15:
b3:40:8c:ce:91:a2:95:80:9b:8a:a2:45:9a:d3:55:
cd:7d:e4:c6:b5:e3:c1:a9:95:3a:14:98:c2:cd:c1:
10:6c:b5:67:b0:1a:a2:55:fc:b3:c4:ca:dd:b5:ed:
ad:46:a4:e4:40:b6:9b:96:b0:72:38:1d:93:ea:f2:
0b:c2:45:e1:27:b5:53:62:cd:2b:c5:dd:ce:3b:0b:
78:5c:ad:17:8d:b7:bc:b9:9a:64:72:a9:61:b9:79:
c0:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:42:BB:06:7E:4F:F6:55:02:D7:23:9C:9D:48:9D:FE:D0:9F:C2:61
X509v3 Authority Key Identifier:
keyid:45:02:E6:3C:E0:1C:AD:23:9A:C3:97:BC:2B:B5:E6:C3:47:DC:EE:EA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RQLmPOAcrSOaw5e8K7Xmw0fc7uo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:76:fd:ce:26:fb:1f:c4:b4:ad:60:99:04:71:aa:64:72:db:
8e:91:2e:67:0c:d4:cf:65:04:48:28:29:06:3c:45:fc:e8:18:
83:0a:85:bc:83:08:26:5a:67:cf:37:65:1e:04:b4:07:ca:97:
e2:c9:d6:4d:ed:2d:13:3d:eb:a6:54:7a:0c:42:37:bb:44:3b:
f1:2a:54:91:38:9a:13:54:69:ab:33:cb:86:3d:49:2f:3c:07:
93:2e:be:0f:33:f6:2c:db:b6:87:e2:a7:be:69:e8:6e:9e:a2:
57:34:d1:23:2c:65:d2:e5:cd:b2:87:40:f4:e1:bd:3e:48:0c:
59:a0:83:c9:dd:96:ca:11:f8:46:dc:fb:74:8c:e0:f4:0b:40:
d7:f1:b0:3f:c6:6c:e6:34:e8:09:40:5f:b9:76:af:68:21:03:
10:2c:e6:98:6c:21:99:b2:a3:9b:db:b1:4c:86:f6:0b:37:c6:
94:7b:61:c6:a1:af:e7:bd:ea:67:0d:b3:65:37:95:41:9c:c0:
b2:26:20:3d:2f:0b:e5:c9:43:0e:64:33:87:b1:2f:0c:f7:23:
fb:2e:06:75:1f:80:13:01:38:7d:f5:ce:50:23:7e:24:b1:a9:
fd:36:b0:91:1f:b1:6d:aa:64:e3:36:67:ae:fd:cb:92:af:60:
2e:5d:67:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 6 02:23:08 2026 by rpki-client