
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/933b2fd7-31c1-451c-8288-c1aa0aa12750/0/45E8648E445DCCD0D8EE699F5140BB814E43AE1B.mft
File: 45E8648E445DCCD0D8EE699F5140BB814E43AE1B.mft (raw, json)
Hash identifier: 0IM/p1pSlyRuQ2fPUbq6VvvsVmoSXc6uMSYJpbJPGOw=
Subject key identifier: 86:53:A5:5D:18:4F:BC:C4:06:14:04:F1:3A:CC:A6:F4:F0:CF:C7:75
Authority key identifier: 45:E8:64:8E:44:5D:CC:D0:D8:EE:69:9F:51:40:BB:81:4E:43:AE:1B
Certificate issuer: /CN=45e8648e445dccd0d8ee699f5140bb814e43ae1b
Certificate serial: 30B99106514AE5F332AADBA8C738784B01C87D8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RehkjkRdzNDY7mmfUUC7gU5Drhs.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/933b2fd7-31c1-451c-8288-c1aa0aa12750/0/45E8648E445DCCD0D8EE699F5140BB814E43AE1B.mft
Manifest number: 0220
Signing time: Wed 25 Mar 2026 13:45:38 +0000
Manifest this update: Wed 25 Mar 2026 13:40:38 +0000
Manifest next update: Thu 26 Mar 2026 15:53:38 +0000
Files and hashes: 1: 37372e38312e38322e302f32342d3234203d3e203438353932.roa (hash: d5TxhwAkeXwrF6uRbXxfjKGJfxHDWIa7sLTALcjfvN4=)
2: 3139332e3234362e3136352e302f32342d3234203d3e2035353131.roa (hash: dGzL7JETjjIym98dnO672H+l9ARVq+lFYDpH7EjSgtE=)
3: 3138352e33392e3138332e302f32342d3234203d3e203438353932.roa (hash: 5y1BpEcUWIqqauwo2u2KJKPFMCa0JPAhvtiDqGTVDHw=)
4: 3139342e32362e322e302f32342d3234203d3e20343031383338.roa (hash: hww+5Hf4jmFo7Au813kPo2lBtFDkf7ALOlVDrCFDow8=)
5: 37372e38312e37392e302f32342d3234203d3e2036303739.roa (hash: u0uKpeiU5ZpBWUsg2bqVMuJ+xilyXQyIO7XWxfYa1xw=)
6: 37372e38312e37362e302f32342d3234203d3e203438353932.roa (hash: xdM7OBZ/9TbpR6di66FXGgK7azfT3ftRTjEe6Yt/SjQ=)
7: 45E8648E445DCCD0D8EE699F5140BB814E43AE1B.crl (hash: pEm7qKrsZAQUQlYBbD4qpdS69nYH++8i5tR5WaXypDo=)
8: 3139342e32362e322e302f32342d3234203d3e2035363530.roa (hash: ZRXlceutGr+HdF7VzH6TN3nc+64+GLWiw3p0vss7mZQ=)
9: 3139332e3234362e3136352e302f32342d3234203d3e20323135373237.roa (hash: lSm6X66gNWDs/TTuCVneNTdg6ziFYnxT4m3l/GUHEaA=)
10: 3139332e3234362e3136342e302f32342d3234203d3e20313335333931.roa (hash: JL/dBZtc7cqNfBqDUBsHO8zmA5iOWu/V8229oSGf3qQ=)
11: 3139342e32362e322e302f32342d3234203d3e2036303739.roa (hash: TjtnNTn7FpO9sB3IOcWEqbyB3qNOxAYh9NFcoqi1238=)
12: 37372e38312e38332e302f32342d3234203d3e203438353932.roa (hash: Tv5q+rfM3afhLe0aBDFGLWT8PXWC4GLzMQF3H6VLFL8=)
13: 3231322e34372e33362e302f32342d3234203d3e2039333138.roa (hash: ZVXQWb7gEfqAkq16Ky0ZSqFCIZ2vC/M8/7YAMrFhXy0=)
14: 37372e38312e37392e302f32342d3234203d3e20343031383338.roa (hash: jqhfslJN0nyOj/30XxhLZVefzpoYoh0e1/irmr4G57s=)
15: 3139342e32362e332e302f32342d3234203d3e20343031313930.roa (hash: LIKAmocMMAfJYEkBfDTJGvC18ZVuFHLl0Op0JOVO1hY=)
16: 3139332e3234362e3136352e302f32342d3234203d3e20323132383135.roa (hash: v4ysGluIX7l1o3oYHo6hoD+oU+wMieIX0KtE9SekExI=)
17: 3139342e32362e32302e302f32342d3234203d3e20323132323338.roa (hash: YP/VU7Ddy/RINA1ejeDsmhFrZUIqFHueTf4iQvV7+Jw=)
18: 37372e38312e38302e302f32332d3233203d3e203230383630.roa (hash: ENs1tyjr+QsCNkYiVs8CGb16BSmudiUVAdhDAu4V/ek=)
19: 3138352e33392e3138302e302f32342d3234203d3e203438353932.roa (hash: ZWyLSTcE9mAQsDVjLP4sbforwwRF0gy7YQkGUCm2B9s=)
20: 37372e38312e37372e302f32342d3234203d3e203438323636.roa (hash: 5I0vOu7kvIMlEY7Sq8XZtvSWHaZxS4B46RvJVyxx8WI=)
21: 3138352e33392e3138322e302f32342d3234203d3e203438353932.roa (hash: 2GU98PVW8A06wPHFP07dWrMXh03+0FNfaArisd+625g=)
22: 3138352e33392e3138312e302f32342d3234203d3e203438353932.roa (hash: wPa88HthyMje0FC4DyK9XcGEOLxJkylfsOcQDqr+i80=)
23: 3139342e32362e32312e302f32342d3234203d3e20343031383338.roa (hash: W6OrrdK1OeSj0zhiikePRhbHjS9VOD7qyg5G4TQyO4k=)
24: 37372e38312e37382e302f32342d3234203d3e203438353932.roa (hash: 5R59EysS9tL6UTIvemaJCrtszj6x6/cuKApXJ2KN9Lk=)
25: 3138382e3231342e3233322e302f32332d3233203d3e2035303635.roa (hash: U7iNThQkzOazFO20cEnZ3jeJVGhPlXoN/qn3Pi641+U=)
26: 37372e38312e37392e302f32342d3234203d3e2037303138.roa (hash: QouC5FWUBHtZ4E7QwYAk/YLY1LKZrC4sUpRgQ8vSbSQ=)
27: 3139342e32362e322e302f32342d3234203d3e2037303138.roa (hash: ipi0vAcQv2svi+muK542zHAIeeVH19r0pk+yh9NadUY=)
28: 3132382e36352e3136342e302f32322d3232203d3e2033333230.roa (hash: MdPKw7OONGYXcOZWO/o2hEi1vtA1V+k+wu8N5c3I5aE=)
29: 37372e38312e37392e302f32342d3234203d3e2035363530.roa (hash: chtAnXZi5q6GRUxpR5xO2uIiP96tdCrOBTIeDsoa8hE=)
30: 3139342e32362e32312e302f32342d3234203d3e2035363530.roa (hash: p78KH8kgcBRXXFcw1mzLGQ6wEbtzI8eA56dk/vajAYc=)
31: 3139342e32362e32312e302f32342d3234203d3e2036303739.roa (hash: C+pqIVBYxtX1Vf4vHbq3YBGNZtxuHmXXj5v6GlxMx88=)
32: 3139342e32362e32312e302f32342d3234203d3e2037303138.roa (hash: kBcBHXRMQfVwN+zg5BZ4LCUyMZ6cS1mQp15ihx19Joc=)
33: 3139332e3234362e3136352e302f32342d3234203d3e20323136313539.roa (hash: 6btW8oVMBrDCtZqv+Luv6y7+nYwucV6SF0bhOqSqdro=)
34: 3132382e36352e3136302e302f32322d3232203d3e203438353932.roa (hash: A3pVDR25ByDI5MeiQGGyctYtEVKjmHED5jwJjMlcbk4=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/933b2fd7-31c1-451c-8288-c1aa0aa12750/0/45E8648E445DCCD0D8EE699F5140BB814E43AE1B.crl
rsync://rsync.paas.rpki.ripe.net/repository/933b2fd7-31c1-451c-8288-c1aa0aa12750/0/45E8648E445DCCD0D8EE699F5140BB814E43AE1B.mft
rsync://rpki.ripe.net/repository/DEFAULT/RehkjkRdzNDY7mmfUUC7gU5Drhs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
30:b9:91:06:51:4a:e5:f3:32:aa:db:a8:c7:38:78:4b:01:c8:7d:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=45e8648e445dccd0d8ee699f5140bb814e43ae1b
Validity
Not Before: Mar 25 13:40:38 2026 GMT
Not After : Mar 26 15:53:38 2026 GMT
Subject: CN=8653A55D184FBCC4061404F13ACCA6F4F0CFC775
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:55:a1:fa:a9:29:43:fe:18:ef:06:88:39:c5:
0e:5f:db:cc:9e:6d:d6:b8:be:f7:af:8e:4e:76:67:
72:87:1b:70:a4:8e:b7:2c:5f:1c:a8:b1:56:6e:82:
f3:8d:af:c7:f4:8a:55:4a:ef:37:43:cd:27:60:b8:
b1:19:81:8f:19:9a:22:1d:ba:48:a4:c4:db:db:0a:
99:15:64:5f:45:24:79:da:e6:77:ba:65:91:63:e5:
72:6a:58:fa:0c:47:41:a4:56:73:9d:c5:76:99:94:
33:ca:51:c6:8d:28:e7:5d:6f:d0:1c:88:37:da:2b:
c2:b6:ab:2b:ad:c1:3e:55:f2:e3:d3:e2:28:17:91:
8b:08:c5:6b:92:b4:7f:34:8c:94:0d:24:67:af:81:
ae:5d:cd:6e:3e:06:be:ac:2b:9c:8a:5a:9d:a8:cc:
2c:19:52:7a:fb:20:af:03:d9:08:83:b7:c6:a9:5c:
7e:a2:15:6d:b4:bd:b9:a0:2a:c0:27:5f:aa:04:cd:
48:88:3c:da:13:12:b4:7d:33:43:1b:fb:34:91:ca:
a3:16:a2:67:a7:70:70:19:e4:c4:85:2c:2c:25:56:
71:8f:12:8a:5c:7b:f9:97:63:41:e9:b5:cc:fe:c1:
3d:62:7e:ce:8c:b5:70:0c:ae:79:d0:14:66:bc:aa:
c0:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:53:A5:5D:18:4F:BC:C4:06:14:04:F1:3A:CC:A6:F4:F0:CF:C7:75
X509v3 Authority Key Identifier:
keyid:45:E8:64:8E:44:5D:CC:D0:D8:EE:69:9F:51:40:BB:81:4E:43:AE:1B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/933b2fd7-31c1-451c-8288-c1aa0aa12750/0/45E8648E445DCCD0D8EE699F5140BB814E43AE1B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RehkjkRdzNDY7mmfUUC7gU5Drhs.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/933b2fd7-31c1-451c-8288-c1aa0aa12750/0/45E8648E445DCCD0D8EE699F5140BB814E43AE1B.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:66:77:c0:15:89:5d:33:8b:2a:61:03:d0:04:9e:0b:23:b9:
cf:24:87:16:6f:8e:38:c3:cd:7b:f7:63:7e:34:11:00:4e:30:
f8:50:c1:11:8f:ec:5c:b5:7d:76:bd:5e:48:9c:53:02:92:c9:
fa:90:c9:f9:cd:a4:b2:7b:8a:46:0c:56:4c:e0:c4:19:a7:88:
8c:0c:a3:85:17:8f:73:10:ec:55:5f:65:d4:42:9b:e5:11:2e:
9a:0d:28:f5:7f:76:34:8b:9f:8a:2b:d4:89:eb:89:b7:41:15:
e5:72:6e:fa:05:31:52:6e:bf:bb:9b:69:fa:14:c5:bd:33:6c:
ef:ce:ba:db:44:70:ff:90:9f:8d:7e:72:92:9b:46:ce:e1:41:
04:99:bb:cd:43:e5:f0:3d:01:dd:d5:fe:ac:e9:60:17:26:3b:
a4:1a:d9:86:3a:cb:e0:86:d1:67:22:a0:84:a2:dd:88:32:c9:
c5:8d:55:4c:49:91:41:32:d8:c7:e8:53:06:8d:8d:3f:dd:f5:
61:a3:c3:38:56:4f:02:fa:5c:e7:e7:ca:33:c1:8f:29:42:23:
d5:7f:c1:52:a3:83:ff:c4:ad:f5:c6:51:f2:34:cd:d1:98:4c:
64:db:33:2e:e2:c3:e7:fa:29:91:c6:d0:90:62:6a:79:de:7d:
48:72:d4:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 25 23:21:24 2026 by rpki-client