
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft
File: 4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft (raw, json)
Hash identifier: 5EaOZ1zvBq8AOCUoFh+rb+Jg43CXmdOOiwhTiYCGAtA=
Subject key identifier: 8A:DB:28:07:AD:37:9E:5A:D6:75:77:2F:27:FE:9C:C5:B5:35:7E:97
Authority key identifier: 45:02:E6:3C:E0:1C:AD:23:9A:C3:97:BC:2B:B5:E6:C3:47:DC:EE:EA
Certificate issuer: /CN=4502e63ce01cad239ac397bc2bb5e6c347dceeea
Certificate serial: 16D69D0CFBCC37E2D7D782B54FA1E007589606BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RQLmPOAcrSOaw5e8K7Xmw0fc7uo.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft
Manifest number: 04EE
Signing time: Sat 30 May 2026 03:24:35 +0000
Manifest this update: Sat 30 May 2026 03:19:35 +0000
Manifest next update: Sun 31 May 2026 04:59:35 +0000
Files and hashes: 1: 3130392e3130372e33322e302f32302d3230203d3e203531303539.roa (hash: C9UfY9CKQ/OvFhFEQghP2qWXJbHFkU7nZrfnb9KHsRk=)
2: 3138352e322e3230362e302f32342d3234203d3e203531303539.roa (hash: 9tY5GTEVxta0324BfaE/zE6amu11uNt5gF70q3lDcAc=)
3: 2A2FB4DB0AA4D006958316872E467B554E0FD0BE.cer (hash: OcnJsnAo4CdRAC7bovVtlzwtakZNX8H8/1jz+FIMvfo=)
4: 3138352e322e3230372e302f32342d3234203d3e203531303539.roa (hash: qJwnVkbZQ0t6fnGyKN6cNCMCxJQWbGimR0QoYNVRTio=)
5: 326130323a313334383a3a2f33322d3332203d3e203531303539.roa (hash: idRPUwrCPZHjiSE/kH24rAzMczemZSkTsfWq1xPwh6Y=)
6: 3138352e322e3230352e302f32342d3234203d3e203531303539.roa (hash: 8NpNc3+Dg1dsLsrdjPPVYWcTafBhsK5m2leiu7R5m5o=)
7: 3138352e322e3230342e302f32342d3234203d3e203531303539.roa (hash: WY6DP7ISPckKutj05yXj19aC18jEUDqW+vlyBEDzYR4=)
8: 4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.crl (hash: yFDR232rLwNh5t0q9c9OQU6NnC+aecAGzrhySfglVAU=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.crl
rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft
rsync://rpki.ripe.net/repository/DEFAULT/RQLmPOAcrSOaw5e8K7Xmw0fc7uo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 31 May 2026 04:59:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
16:d6:9d:0c:fb:cc:37:e2:d7:d7:82:b5:4f:a1:e0:07:58:96:06:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4502e63ce01cad239ac397bc2bb5e6c347dceeea
Validity
Not Before: May 30 03:19:35 2026 GMT
Not After : May 31 04:59:35 2026 GMT
Subject: CN=8ADB2807AD379E5AD675772F27FE9CC5B5357E97
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:07:19:b0:56:4a:ba:00:79:96:b4:64:b7:59:
d1:c4:b5:31:60:6f:39:cb:53:6e:67:c9:c0:ec:8e:
dd:73:6d:08:f0:70:49:14:7d:07:30:39:29:96:a5:
22:00:ee:5d:df:fd:bc:0e:03:b3:a6:14:82:5c:5e:
93:78:7d:e8:ee:9b:29:47:18:4d:23:b9:d8:24:5d:
fa:ab:3d:14:d5:07:73:70:24:ca:8f:44:63:8a:f9:
e8:9a:49:c1:c5:bc:ae:df:73:cb:b6:8c:ad:54:f4:
b3:e0:80:65:ee:e9:25:65:67:8d:9b:f8:59:82:99:
35:9d:09:b9:99:eb:8b:48:fa:da:36:36:6e:b1:5b:
01:68:e9:7c:2b:0a:c3:a2:86:69:ef:d0:37:23:d0:
ea:b0:52:42:05:3f:86:39:55:e7:f4:fa:f5:f7:81:
aa:42:55:8b:e5:50:6e:3d:7b:68:8b:a7:7c:d2:63:
65:53:c5:b5:3d:04:18:56:db:89:36:b8:29:47:da:
36:f5:d5:ae:0f:eb:74:cc:bd:68:00:21:dd:0d:57:
40:2e:af:36:bf:0f:d9:4c:40:ca:01:c2:c7:1b:2c:
22:55:88:67:4f:13:bf:f2:88:99:f9:bb:32:26:e5:
14:94:55:6c:29:e3:cc:e0:a9:c3:54:4a:83:c3:3b:
93:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:DB:28:07:AD:37:9E:5A:D6:75:77:2F:27:FE:9C:C5:B5:35:7E:97
X509v3 Authority Key Identifier:
keyid:45:02:E6:3C:E0:1C:AD:23:9A:C3:97:BC:2B:B5:E6:C3:47:DC:EE:EA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RQLmPOAcrSOaw5e8K7Xmw0fc7uo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:6a:44:96:ff:25:2b:04:4d:0f:ee:c5:2a:a5:4d:69:6b:fd:
92:69:a2:4b:03:aa:55:cf:eb:75:ba:75:26:74:61:02:fb:1b:
a4:9b:e6:cb:82:87:1b:f7:7d:1d:1b:d5:af:03:b2:2a:72:76:
d5:46:09:5f:99:a7:be:78:9e:6b:0e:ff:91:e2:6d:3b:5b:59:
ce:b6:c8:7f:25:c0:9c:51:c6:f1:9b:f4:97:47:21:7a:c9:5b:
e5:fc:a0:9e:26:c3:fc:7f:99:81:2e:9e:ce:86:39:29:8b:1f:
39:99:53:34:60:c8:5e:b2:c8:eb:ed:3f:a7:52:d7:ed:e7:ed:
45:5c:80:9e:0c:41:97:35:e9:4f:df:ed:00:76:c9:c8:d0:a9:
ae:72:d2:6c:ea:f8:2a:0b:e4:50:2d:2b:f7:22:43:a6:78:98:
71:1f:84:93:19:be:83:ec:db:3d:3e:24:2b:27:fd:6e:55:9a:
31:a8:5e:62:ad:a1:39:d5:e0:d6:d6:69:5c:62:ab:0e:2e:36:
7d:e2:f2:ad:70:29:f1:35:5f:29:0a:52:5e:aa:ef:e0:79:01:
ee:5a:07:b7:3f:22:82:61:91:46:92:06:a3:9c:cf:c4:8d:24:
63:f4:98:73:4c:0e:6a:55:82:52:ee:50:f6:12:c6:38:cf:5c:
be:da:58:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 30 19:11:24 2026 by rpki-client