
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft
File: 4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft (raw, json)
Hash identifier: 7gm6KRacrkMerzOrxFEAXVNcuam2Ub4UysDbYVo0XIM=
Subject key identifier: F5:37:7E:32:DE:10:80:C8:82:E9:F2:3C:AC:75:B2:F6:18:41:3F:A2
Authority key identifier: 45:02:E6:3C:E0:1C:AD:23:9A:C3:97:BC:2B:B5:E6:C3:47:DC:EE:EA
Certificate issuer: /CN=4502e63ce01cad239ac397bc2bb5e6c347dceeea
Certificate serial: 791397362D32ED145B70D54F10B753C916F1A1FE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RQLmPOAcrSOaw5e8K7Xmw0fc7uo.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft
Manifest number: 053D
Signing time: Wed 29 Jul 2026 07:15:56 +0000
Manifest this update: Wed 29 Jul 2026 07:10:56 +0000
Manifest next update: Thu 30 Jul 2026 11:00:56 +0000
Files and hashes: 1: 3138352e322e3230362e302f32342d3234203d3e203531303539.roa (hash: 9tY5GTEVxta0324BfaE/zE6amu11uNt5gF70q3lDcAc=)
2: 3138352e322e3230352e302f32342d3234203d3e203531303539.roa (hash: 8NpNc3+Dg1dsLsrdjPPVYWcTafBhsK5m2leiu7R5m5o=)
3: 3138352e322e3230372e302f32342d3234203d3e203531303539.roa (hash: qJwnVkbZQ0t6fnGyKN6cNCMCxJQWbGimR0QoYNVRTio=)
4: 3130392e3130372e33322e302f32302d3230203d3e203531303539.roa (hash: C9UfY9CKQ/OvFhFEQghP2qWXJbHFkU7nZrfnb9KHsRk=)
5: 2A2FB4DB0AA4D006958316872E467B554E0FD0BE.cer (hash: OcnJsnAo4CdRAC7bovVtlzwtakZNX8H8/1jz+FIMvfo=)
6: 326130323a313334383a3a2f33322d3332203d3e203531303539.roa (hash: idRPUwrCPZHjiSE/kH24rAzMczemZSkTsfWq1xPwh6Y=)
7: 4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.crl (hash: hvys2jTdH1OvKxXrJNVR0FD1J6KFFItcpKDPjFwBJ54=)
8: 3138352e322e3230342e302f32342d3234203d3e203531303539.roa (hash: WY6DP7ISPckKutj05yXj19aC18jEUDqW+vlyBEDzYR4=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.crl
rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft
rsync://rpki.ripe.net/repository/DEFAULT/RQLmPOAcrSOaw5e8K7Xmw0fc7uo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 30 Jul 2026 11:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
79:13:97:36:2d:32:ed:14:5b:70:d5:4f:10:b7:53:c9:16:f1:a1:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4502e63ce01cad239ac397bc2bb5e6c347dceeea
Validity
Not Before: Jul 29 07:10:56 2026 GMT
Not After : Jul 30 11:00:56 2026 GMT
Subject: CN=F5377E32DE1080C882E9F23CAC75B2F618413FA2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:64:b9:d8:fc:97:1c:ec:95:97:08:74:ce:bb:
3e:34:3b:d1:7a:f4:4b:37:0d:c9:ba:e1:ce:ef:20:
74:15:23:ed:c6:23:2e:66:11:73:11:e5:e6:65:a3:
a3:3a:e0:f9:ce:50:2e:3c:0f:85:ed:b2:fc:5f:42:
96:e6:f2:04:4c:be:45:a8:14:c2:d2:05:09:a8:57:
3d:9f:14:72:ab:1d:28:c9:8c:fc:d5:66:da:45:bb:
91:a1:8b:cc:02:1d:a2:83:38:82:1f:55:81:e4:42:
ef:09:60:5e:c6:de:c7:9e:ec:68:cf:bb:11:e6:c7:
16:e8:a7:b3:72:17:90:b8:10:85:ff:ab:6b:b9:e3:
66:c1:bb:a1:41:4a:08:4f:e8:c0:c1:02:6f:75:96:
9b:0c:4d:0d:17:c7:3a:97:b5:68:1b:98:2d:7a:7f:
02:f8:d2:8d:f0:1b:2b:8b:57:c8:71:74:e8:29:ab:
0b:b1:ac:e8:e1:01:16:e1:2b:5a:5a:fc:23:66:a4:
71:e2:ce:31:04:56:c0:07:07:39:45:2c:24:9a:a0:
33:79:cf:c1:8e:e4:1d:2b:42:a7:a3:ca:41:f7:1a:
75:e0:d1:be:37:30:8d:f1:3d:92:6b:b8:a2:9e:20:
eb:b9:d6:67:64:45:04:28:27:51:fb:52:80:8b:c1:
5d:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:37:7E:32:DE:10:80:C8:82:E9:F2:3C:AC:75:B2:F6:18:41:3F:A2
X509v3 Authority Key Identifier:
keyid:45:02:E6:3C:E0:1C:AD:23:9A:C3:97:BC:2B:B5:E6:C3:47:DC:EE:EA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RQLmPOAcrSOaw5e8K7Xmw0fc7uo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:98:8d:c0:02:1c:b0:09:61:10:1a:d3:aa:a9:b4:4a:5f:70:
75:97:69:c0:a9:df:5d:86:36:24:b1:a1:21:e7:28:76:f3:ea:
0d:fa:aa:f5:0b:8a:94:ba:67:44:cc:a4:3f:67:76:72:d6:ea:
33:db:59:f0:27:f5:36:59:b4:d9:5e:07:e3:93:a7:3b:3f:1c:
a8:fe:65:28:b0:71:90:63:ff:54:ae:4d:12:5a:3c:b8:da:43:
9b:3b:43:9f:ba:ef:90:43:6e:2e:86:3b:09:b6:3d:79:ed:f9:
1b:f3:1e:4a:a2:63:bf:b7:f1:e3:6f:6e:82:85:ff:66:00:a8:
a8:67:af:13:58:bc:db:40:68:e2:61:ee:90:06:08:d2:6d:89:
77:a4:df:af:ce:70:85:23:33:3d:0e:42:59:64:85:4b:2b:72:
0d:7c:06:73:43:d6:88:ad:9f:5e:c3:27:23:01:23:5e:b8:2f:
23:0c:63:08:a4:91:1e:5c:ac:fa:35:3d:0d:f0:0d:6c:c7:80:
dc:f5:f3:1f:3a:08:b6:1e:c5:c8:27:25:e2:57:b7:ec:3e:e1:
23:cf:f0:2a:a9:c2:ed:1f:82:61:1f:14:a2:2d:fd:cb:3d:31:
8d:b8:71:ec:27:11:07:50:9f:08:16:12:06:de:a4:10:85:3d:
4d:ff:23:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 22:57:58 2026 by rpki-client