
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft
File: 4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft (raw, json)
Hash identifier: 9bTEiPfT7x9UWbNFL68ejkc65aXp+YzHGFCA7mBdEaw=
Subject key identifier: D3:8F:45:61:89:FF:81:DA:9D:74:A7:08:DD:A2:77:84:25:29:22:5C
Authority key identifier: 45:02:E6:3C:E0:1C:AD:23:9A:C3:97:BC:2B:B5:E6:C3:47:DC:EE:EA
Certificate issuer: /CN=4502e63ce01cad239ac397bc2bb5e6c347dceeea
Certificate serial: 519D58BA557F63234E9F252FCA83BC1C4075F910
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RQLmPOAcrSOaw5e8K7Xmw0fc7uo.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft
Manifest number: 046B
Signing time: Sat 21 Feb 2026 03:50:17 +0000
Manifest this update: Sat 21 Feb 2026 03:45:17 +0000
Manifest next update: Sun 22 Feb 2026 04:43:17 +0000
Files and hashes: 1: 3138352e322e3230372e302f32342d3234203d3e203531303539.roa (hash: qJwnVkbZQ0t6fnGyKN6cNCMCxJQWbGimR0QoYNVRTio=)
2: 326130323a313334383a3a2f33322d3332203d3e203531303539.roa (hash: idRPUwrCPZHjiSE/kH24rAzMczemZSkTsfWq1xPwh6Y=)
3: 4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.crl (hash: UjC2+xpM/1ji9nEixsMS43SK1RCznxTeRDNgicbXLGA=)
4: 3130392e3130372e33322e302f32302d3230203d3e203531303539.roa (hash: C9UfY9CKQ/OvFhFEQghP2qWXJbHFkU7nZrfnb9KHsRk=)
5: 3138352e322e3230362e302f32342d3234203d3e203531303539.roa (hash: 9tY5GTEVxta0324BfaE/zE6amu11uNt5gF70q3lDcAc=)
6: 2A2FB4DB0AA4D006958316872E467B554E0FD0BE.cer (hash: QKOeJK2sWZOwn3ONUziDLsfn/UIwuJcjEwQlr5pjUqw=)
7: 3138352e322e3230352e302f32342d3234203d3e203531303539.roa (hash: 8NpNc3+Dg1dsLsrdjPPVYWcTafBhsK5m2leiu7R5m5o=)
8: 3138352e322e3230342e302f32342d3234203d3e203531303539.roa (hash: WY6DP7ISPckKutj05yXj19aC18jEUDqW+vlyBEDzYR4=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.crl
rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft
rsync://rpki.ripe.net/repository/DEFAULT/RQLmPOAcrSOaw5e8K7Xmw0fc7uo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 22 Feb 2026 00:56:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
51:9d:58:ba:55:7f:63:23:4e:9f:25:2f:ca:83:bc:1c:40:75:f9:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4502e63ce01cad239ac397bc2bb5e6c347dceeea
Validity
Not Before: Feb 21 03:45:17 2026 GMT
Not After : Feb 22 04:43:17 2026 GMT
Subject: CN=D38F456189FF81DA9D74A708DDA277842529225C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:a5:a9:24:2e:27:33:4b:90:34:fc:c4:4f:6d:
1d:7e:e5:62:cf:45:76:a5:8c:cf:6e:a0:89:ab:b3:
30:a0:b3:5b:8d:6f:47:c3:ea:9b:d1:fe:1c:19:c9:
d2:7e:a3:36:ba:67:58:fd:4a:6f:68:c2:62:5a:26:
2d:d1:26:91:18:bf:5b:0e:5c:aa:4e:40:8b:47:48:
c5:70:18:20:03:9f:9a:0b:39:5e:cb:3f:b3:e4:01:
87:16:f7:aa:f3:89:d2:11:bb:24:ce:c4:cf:5b:d4:
82:a1:bc:67:10:05:2a:1d:3f:37:02:a1:35:ca:46:
2a:a3:1f:0c:54:ac:ab:16:be:f3:56:cf:14:49:ca:
01:94:1b:56:c7:6d:ca:4d:01:81:ce:08:49:3f:81:
fe:a7:3e:57:d2:cb:46:ea:4d:d3:b1:1a:83:fd:e2:
97:c8:ea:f3:85:e3:2d:51:0d:85:45:f3:4a:15:91:
38:66:ee:34:57:99:e4:78:2b:d1:cc:b8:0f:8f:5a:
31:57:9d:42:65:cf:45:6c:9d:c1:77:e6:09:a1:2f:
4f:ce:1a:28:b0:54:91:7c:7c:16:59:38:17:34:e8:
d0:b9:02:f3:72:7f:2d:e9:88:84:14:cb:14:74:e8:
94:18:97:26:39:a4:39:c3:31:51:29:4f:4c:8b:4e:
55:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:8F:45:61:89:FF:81:DA:9D:74:A7:08:DD:A2:77:84:25:29:22:5C
X509v3 Authority Key Identifier:
keyid:45:02:E6:3C:E0:1C:AD:23:9A:C3:97:BC:2B:B5:E6:C3:47:DC:EE:EA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RQLmPOAcrSOaw5e8K7Xmw0fc7uo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:af:e3:03:51:eb:da:c7:d7:e5:fc:e5:14:4b:91:33:b0:52:
4c:75:87:30:9e:23:58:88:ac:cf:b2:74:15:89:f8:96:b1:60:
4b:46:06:70:7f:d1:92:b8:7e:6d:5c:a1:fa:30:0c:07:18:70:
f1:c8:15:f0:69:c8:c9:0e:88:3d:dd:e3:2a:4b:94:6f:87:fe:
5f:25:3f:9b:c9:02:7f:68:51:b1:5e:93:97:fc:ff:9d:07:d6:
6d:26:2f:a0:e7:8c:a5:c8:60:37:2f:3d:71:d9:a1:ce:bf:e7:
2b:d3:ac:25:0e:61:fd:30:a0:b6:a4:a8:27:90:0d:a0:63:39:
9c:03:5e:4c:45:06:6a:74:e1:36:ee:50:7d:55:cd:ae:d1:d3:
82:15:fd:91:33:f4:b6:a6:1b:de:7f:92:87:2c:0d:ce:83:84:
e3:ca:07:49:31:5c:5a:59:1c:e7:bf:20:94:18:37:48:c7:9a:
9a:fe:a9:73:c3:72:9f:86:fe:0a:a2:dc:da:a1:cc:cb:58:bf:
95:61:f2:85:75:ab:60:85:e7:a4:1c:33:5f:b4:1f:e7:85:8f:
17:d5:b6:11:80:cd:e9:e5:4e:44:67:24:53:a9:71:08:2e:c6:
70:bb:fe:97:32:5a:43:ce:bc:ac:02:0d:db:6a:60:3d:05:95:
aa:bb:44:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Feb 21 09:22:14 2026 by rpki-client