
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft
File: 4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft (raw, json)
Hash identifier: dOqyUFIDT4tI6+Lm/PmJx2rtEd5cwGfAtMsIYWO9lwI=
Subject key identifier: BB:55:5C:C2:9E:97:EA:FB:58:BF:07:1A:8A:09:A7:B1:F7:D4:31:99
Authority key identifier: 45:02:E6:3C:E0:1C:AD:23:9A:C3:97:BC:2B:B5:E6:C3:47:DC:EE:EA
Certificate issuer: /CN=4502e63ce01cad239ac397bc2bb5e6c347dceeea
Certificate serial: 48F339DA02461C411519B199B54C888EF925541B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RQLmPOAcrSOaw5e8K7Xmw0fc7uo.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft
Manifest number: 050C
Signing time: Mon 22 Jun 2026 04:08:08 +0000
Manifest this update: Mon 22 Jun 2026 04:03:08 +0000
Manifest next update: Tue 23 Jun 2026 07:50:08 +0000
Files and hashes: 1: 326130323a313334383a3a2f33322d3332203d3e203531303539.roa (hash: idRPUwrCPZHjiSE/kH24rAzMczemZSkTsfWq1xPwh6Y=)
2: 4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.crl (hash: UWjfKdmHnuiGOzVPX8z4shwuEl6lgl7hwYByTqeBQSA=)
3: 3138352e322e3230342e302f32342d3234203d3e203531303539.roa (hash: WY6DP7ISPckKutj05yXj19aC18jEUDqW+vlyBEDzYR4=)
4: 3138352e322e3230372e302f32342d3234203d3e203531303539.roa (hash: qJwnVkbZQ0t6fnGyKN6cNCMCxJQWbGimR0QoYNVRTio=)
5: 3130392e3130372e33322e302f32302d3230203d3e203531303539.roa (hash: C9UfY9CKQ/OvFhFEQghP2qWXJbHFkU7nZrfnb9KHsRk=)
6: 2A2FB4DB0AA4D006958316872E467B554E0FD0BE.cer (hash: OcnJsnAo4CdRAC7bovVtlzwtakZNX8H8/1jz+FIMvfo=)
7: 3138352e322e3230352e302f32342d3234203d3e203531303539.roa (hash: 8NpNc3+Dg1dsLsrdjPPVYWcTafBhsK5m2leiu7R5m5o=)
8: 3138352e322e3230362e302f32342d3234203d3e203531303539.roa (hash: 9tY5GTEVxta0324BfaE/zE6amu11uNt5gF70q3lDcAc=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.crl
rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft
rsync://rpki.ripe.net/repository/DEFAULT/RQLmPOAcrSOaw5e8K7Xmw0fc7uo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 23 Jun 2026 05:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
48:f3:39:da:02:46:1c:41:15:19:b1:99:b5:4c:88:8e:f9:25:54:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4502e63ce01cad239ac397bc2bb5e6c347dceeea
Validity
Not Before: Jun 22 04:03:08 2026 GMT
Not After : Jun 23 07:50:08 2026 GMT
Subject: CN=BB555CC29E97EAFB58BF071A8A09A7B1F7D43199
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:1d:cf:49:f6:0f:ff:83:70:2e:02:0a:e4:6f:
91:1e:12:14:0d:ad:8a:c6:29:09:5b:c6:7a:58:1c:
ad:d3:d6:1a:ea:1f:d6:d9:25:98:a4:5e:b6:6d:f0:
65:60:d8:de:42:37:af:d6:d9:28:c7:84:cb:65:88:
25:00:09:e3:d9:d2:43:bc:55:c2:c8:61:31:0d:c6:
55:db:86:d5:d6:92:dd:78:5b:a0:16:2c:86:33:cc:
f7:87:9e:40:57:e5:8e:2c:98:ec:5f:3e:96:b9:dd:
53:63:e6:e7:80:8c:f1:d7:ed:2e:c9:67:a2:13:0d:
7e:c8:03:57:bc:0e:0c:95:90:4f:6c:d4:bc:24:c5:
99:16:3d:03:15:8d:95:39:84:ff:ed:da:da:f9:ea:
44:00:9a:bf:2e:00:d9:87:d2:72:04:01:3c:5b:6b:
40:9b:0f:ae:9f:a2:bd:f3:0b:c4:fe:94:7a:0a:2c:
88:b1:e7:5f:7e:58:2a:95:20:34:81:af:20:28:e7:
4e:f2:dc:33:4d:ce:bb:61:4e:c4:07:da:5e:f6:d9:
af:56:fb:e3:c0:c0:3c:32:b4:ad:d4:66:d3:8c:39:
05:a7:de:f4:8c:da:06:e8:b5:b7:8e:a2:92:b3:41:
f1:d8:2a:51:50:ec:78:e6:2d:6a:95:f6:b7:bc:9a:
07:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:55:5C:C2:9E:97:EA:FB:58:BF:07:1A:8A:09:A7:B1:F7:D4:31:99
X509v3 Authority Key Identifier:
keyid:45:02:E6:3C:E0:1C:AD:23:9A:C3:97:BC:2B:B5:E6:C3:47:DC:EE:EA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RQLmPOAcrSOaw5e8K7Xmw0fc7uo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:01:47:92:22:85:c4:26:0c:ab:2b:b6:00:91:44:bc:19:68:
bc:75:27:c6:bc:b1:8f:f5:3f:f3:c2:da:59:cd:e5:7d:ef:28:
f2:36:58:24:47:60:bd:c4:23:2f:5f:8f:8e:c5:f9:4e:98:8b:
e6:b7:1b:7c:ec:99:2e:28:bb:93:76:03:46:3a:f0:37:45:4e:
57:ed:35:bf:1a:ad:8a:fe:cc:e1:0f:b1:c5:ea:c5:5f:4a:d2:
c3:a4:53:9b:07:cc:cf:1f:67:17:ee:be:62:48:81:aa:7a:f4:
a8:94:77:11:32:35:3d:19:91:e3:e9:34:17:bb:29:70:85:45:
84:7c:2d:03:8f:3e:65:e6:a8:2d:fa:66:2b:78:85:db:57:e8:
1f:9f:d8:02:ce:90:dc:fc:3f:8f:13:7b:8a:ef:62:cf:34:cd:
e6:f6:78:e1:e9:61:3a:86:b7:8d:a9:ad:b5:87:50:33:22:0e:
99:77:8c:36:17:c1:37:09:cb:bb:10:56:e4:4e:e4:cc:dc:95:
15:b7:1e:34:56:fa:d3:04:3b:65:f0:ea:df:09:d5:07:f7:80:
22:05:90:f0:4e:48:1d:b9:fc:c5:16:e8:2d:64:f4:15:0d:e1:
85:21:54:4d:96:72:e7:b3:4d:9e:07:ea:a6:e7:75:95:c7:00:
5f:c9:c8:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 22 13:25:35 2026 by rpki-client