
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft
File: 4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft (raw, json)
Hash identifier: QQISWm+FM4AEOHvfnHX+BHfv5MEfzp0kipfyGVpfWp8=
Subject key identifier: 51:3F:AB:92:8F:72:15:ED:F7:C7:89:59:27:34:04:3D:A4:C8:DD:70
Authority key identifier: 45:02:E6:3C:E0:1C:AD:23:9A:C3:97:BC:2B:B5:E6:C3:47:DC:EE:EA
Certificate issuer: /CN=4502e63ce01cad239ac397bc2bb5e6c347dceeea
Certificate serial: 771BAB86B2629703A4C44A2894F0F928F4F84008
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RQLmPOAcrSOaw5e8K7Xmw0fc7uo.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft
Manifest number: 04DD
Signing time: Sun 17 May 2026 14:09:30 +0000
Manifest this update: Sun 17 May 2026 14:04:30 +0000
Manifest next update: Mon 18 May 2026 17:27:30 +0000
Files and hashes: 1: 3138352e322e3230372e302f32342d3234203d3e203531303539.roa (hash: qJwnVkbZQ0t6fnGyKN6cNCMCxJQWbGimR0QoYNVRTio=)
2: 2A2FB4DB0AA4D006958316872E467B554E0FD0BE.cer (hash: QKOeJK2sWZOwn3ONUziDLsfn/UIwuJcjEwQlr5pjUqw=)
3: 3138352e322e3230342e302f32342d3234203d3e203531303539.roa (hash: WY6DP7ISPckKutj05yXj19aC18jEUDqW+vlyBEDzYR4=)
4: 326130323a313334383a3a2f33322d3332203d3e203531303539.roa (hash: idRPUwrCPZHjiSE/kH24rAzMczemZSkTsfWq1xPwh6Y=)
5: 4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.crl (hash: RahiOs5kCMAc5Tian79rEWGjqPkprhsYPFhtJlPbH2o=)
6: 3130392e3130372e33322e302f32302d3230203d3e203531303539.roa (hash: C9UfY9CKQ/OvFhFEQghP2qWXJbHFkU7nZrfnb9KHsRk=)
7: 3138352e322e3230362e302f32342d3234203d3e203531303539.roa (hash: 9tY5GTEVxta0324BfaE/zE6amu11uNt5gF70q3lDcAc=)
8: 3138352e322e3230352e302f32342d3234203d3e203531303539.roa (hash: 8NpNc3+Dg1dsLsrdjPPVYWcTafBhsK5m2leiu7R5m5o=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.crl
rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft
rsync://rpki.ripe.net/repository/DEFAULT/RQLmPOAcrSOaw5e8K7Xmw0fc7uo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 18 May 2026 08:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
77:1b:ab:86:b2:62:97:03:a4:c4:4a:28:94:f0:f9:28:f4:f8:40:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4502e63ce01cad239ac397bc2bb5e6c347dceeea
Validity
Not Before: May 17 14:04:30 2026 GMT
Not After : May 18 17:27:30 2026 GMT
Subject: CN=513FAB928F7215EDF7C789592734043DA4C8DD70
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:fc:11:7d:72:91:9f:ab:87:67:c9:fe:5c:bf:
d2:52:40:fe:cb:e9:02:d1:01:7f:18:73:e6:29:33:
2a:e9:61:65:29:6d:78:1f:79:58:8b:97:d8:3e:3c:
4d:94:4a:7e:36:4f:6a:c6:e9:d5:48:e0:65:de:62:
c6:d0:ba:de:8d:89:b4:b6:91:ea:18:cb:c9:b7:ad:
b1:fe:24:e1:53:36:56:b4:d0:c6:4d:02:1f:e7:3b:
0d:b8:0c:64:49:6d:6b:49:eb:76:cd:fa:b7:a7:4b:
53:5c:a9:9d:92:f7:17:8b:8e:95:e4:81:9d:4e:85:
50:29:cf:86:a2:3e:04:3c:71:8b:5c:3c:ba:bd:bf:
4c:bf:db:2b:bb:fb:8b:60:07:0b:8b:87:ce:e7:6e:
63:13:2f:ca:d5:1d:30:ec:a4:31:c1:1c:ae:85:28:
46:d9:a0:27:9c:25:8f:19:59:e8:eb:e6:44:8c:bb:
60:eb:bc:2d:fb:46:34:df:23:0a:66:cb:c7:f6:e2:
3a:89:b6:05:aa:a2:41:da:55:6e:d4:05:3b:98:8a:
06:d2:70:16:4f:40:c0:1b:c8:69:5e:a0:b4:19:6b:
85:cf:e0:9c:b5:c4:7c:57:e1:92:e7:59:9e:34:3b:
5a:fb:79:52:78:63:d1:f4:c0:c6:25:b9:af:c6:57:
96:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:3F:AB:92:8F:72:15:ED:F7:C7:89:59:27:34:04:3D:A4:C8:DD:70
X509v3 Authority Key Identifier:
keyid:45:02:E6:3C:E0:1C:AD:23:9A:C3:97:BC:2B:B5:E6:C3:47:DC:EE:EA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RQLmPOAcrSOaw5e8K7Xmw0fc7uo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:a6:bf:3b:27:4c:6b:bf:8c:bb:10:c0:3d:88:d7:26:be:ce:
f0:fc:45:81:0a:04:76:1b:42:38:71:0f:c6:bc:6c:cf:97:85:
e1:1d:02:8f:f2:4b:62:da:19:5d:bd:a5:70:6e:af:43:d2:41:
56:0d:01:ed:98:e5:8b:e6:00:26:7c:09:e2:6b:89:c8:39:3b:
6c:38:c0:4c:01:80:39:37:52:3f:cf:e7:f5:66:39:66:35:d1:
c4:64:24:aa:62:fe:e0:e2:58:a9:a1:1e:8f:07:93:ef:3b:e4:
f2:ad:1f:fd:c6:c0:a2:b0:fa:06:8f:73:2c:5d:32:ef:f7:ac:
48:bb:f3:e2:a0:7c:a4:01:ce:06:e2:f4:99:0e:9b:85:16:f8:
68:13:1b:35:36:55:64:cf:61:be:b7:b9:15:11:a7:c2:49:e6:
39:80:b5:59:1c:ee:52:d8:53:1f:ff:54:93:42:b2:f5:da:9d:
cd:92:58:66:16:62:9c:f1:fa:4e:58:60:e0:35:4f:d1:90:fd:
73:04:2c:5f:4d:9f:b4:29:d0:23:af:79:77:ad:a9:9a:6b:c3:
71:ee:6a:b6:1c:7b:ce:3a:3e:39:d2:d2:2d:24:16:93:f0:8a:
8f:98:e3:4e:97:a7:71:4c:a7:d6:31:43:a8:d8:35:12:1a:5f:
09:49:28:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 17 16:15:55 2026 by rpki-client