
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft
File: 4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft (raw, json)
Hash identifier: gBIN8c+srVUmGDrutXyH0b5YK6AI5pGoHqVmyv4HKgY=
Subject key identifier: B6:71:A1:D8:37:DB:76:A1:D2:97:43:21:C4:9D:6F:AE:64:FA:11:D7
Authority key identifier: 45:02:E6:3C:E0:1C:AD:23:9A:C3:97:BC:2B:B5:E6:C3:47:DC:EE:EA
Certificate issuer: /CN=4502e63ce01cad239ac397bc2bb5e6c347dceeea
Certificate serial: 3773EC65E98DDC72CD6AE5AA03A2F973D2AF84C8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RQLmPOAcrSOaw5e8K7Xmw0fc7uo.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft
Manifest number: 04E8
Signing time: Mon 25 May 2026 15:33:05 +0000
Manifest this update: Mon 25 May 2026 15:28:05 +0000
Manifest next update: Tue 26 May 2026 15:47:05 +0000
Files and hashes: 1: 3130392e3130372e33322e302f32302d3230203d3e203531303539.roa (hash: C9UfY9CKQ/OvFhFEQghP2qWXJbHFkU7nZrfnb9KHsRk=)
2: 3138352e322e3230362e302f32342d3234203d3e203531303539.roa (hash: 9tY5GTEVxta0324BfaE/zE6amu11uNt5gF70q3lDcAc=)
3: 4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.crl (hash: X7aYdtMrAKHmDF9+/SqQM1YCBh3Yy2IisxefvMwQers=)
4: 3138352e322e3230342e302f32342d3234203d3e203531303539.roa (hash: WY6DP7ISPckKutj05yXj19aC18jEUDqW+vlyBEDzYR4=)
5: 3138352e322e3230352e302f32342d3234203d3e203531303539.roa (hash: 8NpNc3+Dg1dsLsrdjPPVYWcTafBhsK5m2leiu7R5m5o=)
6: 2A2FB4DB0AA4D006958316872E467B554E0FD0BE.cer (hash: OcnJsnAo4CdRAC7bovVtlzwtakZNX8H8/1jz+FIMvfo=)
7: 3138352e322e3230372e302f32342d3234203d3e203531303539.roa (hash: qJwnVkbZQ0t6fnGyKN6cNCMCxJQWbGimR0QoYNVRTio=)
8: 326130323a313334383a3a2f33322d3332203d3e203531303539.roa (hash: idRPUwrCPZHjiSE/kH24rAzMczemZSkTsfWq1xPwh6Y=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.crl
rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft
rsync://rpki.ripe.net/repository/DEFAULT/RQLmPOAcrSOaw5e8K7Xmw0fc7uo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 26 May 2026 15:47:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
37:73:ec:65:e9:8d:dc:72:cd:6a:e5:aa:03:a2:f9:73:d2:af:84:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4502e63ce01cad239ac397bc2bb5e6c347dceeea
Validity
Not Before: May 25 15:28:05 2026 GMT
Not After : May 26 15:47:05 2026 GMT
Subject: CN=B671A1D837DB76A1D2974321C49D6FAE64FA11D7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:a2:29:d0:90:9e:f0:55:da:d0:ce:dd:6a:a7:
81:29:8e:73:14:4e:f8:50:2f:74:27:da:00:c1:14:
a5:a3:12:f4:90:01:c0:93:6a:36:f6:41:32:46:92:
50:a0:88:18:2e:f0:be:56:76:11:11:5b:bb:4e:b0:
4d:05:32:bd:a7:17:78:e0:1f:e6:f7:47:d8:25:f0:
03:84:78:36:d3:92:79:0a:0a:8e:5d:cd:21:d8:65:
6b:55:2b:ec:22:91:d5:63:cc:57:7d:c5:01:ce:4e:
27:d7:3b:fa:8c:41:cb:20:29:80:4c:af:1d:07:c8:
63:37:d5:9d:b4:f0:90:7a:c5:4d:e8:5c:bf:21:44:
6c:f8:09:f5:a7:1f:24:d5:70:ce:a0:8b:93:33:f6:
e0:85:c0:c6:63:71:3d:1f:f3:85:f9:15:0d:fb:99:
71:51:6d:d8:d0:94:68:d3:a0:ac:4c:3e:16:6b:9f:
cb:f4:04:d7:e7:9e:bc:1d:57:95:1b:eb:24:d5:34:
99:32:77:d1:c1:75:35:25:0f:f1:95:27:1e:b8:8a:
5f:20:49:8e:5a:15:c7:ec:c6:19:ad:00:be:54:85:
a4:28:e0:48:6d:c2:af:59:01:f3:e2:79:7b:56:37:
25:53:c6:54:77:d8:0f:02:cc:30:77:95:55:1c:f7:
64:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:71:A1:D8:37:DB:76:A1:D2:97:43:21:C4:9D:6F:AE:64:FA:11:D7
X509v3 Authority Key Identifier:
keyid:45:02:E6:3C:E0:1C:AD:23:9A:C3:97:BC:2B:B5:E6:C3:47:DC:EE:EA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RQLmPOAcrSOaw5e8K7Xmw0fc7uo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:b6:ec:34:93:0c:33:a0:36:96:aa:e3:e7:f3:1e:57:8e:e7:
3c:31:e9:7c:73:b7:be:be:29:70:bb:f0:e0:1e:91:f1:84:87:
fa:47:42:05:eb:ef:b7:b0:c2:1c:82:ec:0e:5c:1b:ab:5e:d3:
93:fd:c3:67:0d:b7:1d:20:e9:40:ba:fd:ed:6d:d7:8e:84:77:
2a:6f:e4:17:ba:40:99:ec:84:d9:da:ba:82:6e:84:58:3c:2e:
3e:32:56:c1:d2:0e:34:a4:e2:b6:a6:f0:8a:74:9d:63:a9:03:
16:4a:dd:6a:77:7b:66:82:64:23:9f:74:a1:d5:1a:8e:ec:f2:
c5:da:86:0a:46:fe:5c:38:6e:6f:b6:0c:6a:26:7b:87:12:68:
49:ed:d6:59:42:81:60:a9:14:17:ab:41:db:17:d2:84:74:92:
3e:87:3e:03:b1:61:41:c6:c9:83:1e:a3:ba:aa:2d:e4:ac:ba:
59:ec:b3:0c:a2:21:45:72:7c:36:63:47:56:37:0b:25:37:9f:
21:01:f8:95:d0:e1:6b:6e:2e:a7:b3:a3:89:42:b7:c0:f0:21:
3a:00:87:e1:5d:42:54:94:29:6e:f0:5d:a8:e4:31:a3:a4:e6:
59:bd:42:af:68:9b:45:ab:68:aa:89:48:15:8d:fb:c1:67:dc:
54:5d:5c:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 26 03:40:48 2026 by rpki-client