
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/933b2fd7-31c1-451c-8288-c1aa0aa12750/0/45E8648E445DCCD0D8EE699F5140BB814E43AE1B.mft
File: 45E8648E445DCCD0D8EE699F5140BB814E43AE1B.mft (raw, json)
Hash identifier: x93nkO4w3jxLmjh5ejIls/dVKpfO9n/A5SbNhEAbq/E=
Subject key identifier: 24:5C:85:EF:C8:54:5F:1E:D7:3C:62:CA:8A:BE:FE:F0:64:00:A6:7D
Authority key identifier: 45:E8:64:8E:44:5D:CC:D0:D8:EE:69:9F:51:40:BB:81:4E:43:AE:1B
Certificate issuer: /CN=45e8648e445dccd0d8ee699f5140bb814e43ae1b
Certificate serial: 310FB9622AF7EDCA8C3DD0E60B5A8181DEB1ED43
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RehkjkRdzNDY7mmfUUC7gU5Drhs.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/933b2fd7-31c1-451c-8288-c1aa0aa12750/0/45E8648E445DCCD0D8EE699F5140BB814E43AE1B.mft
Manifest number: 02CC
Signing time: Fri 24 Jul 2026 00:02:04 +0000
Manifest this update: Thu 23 Jul 2026 23:57:04 +0000
Manifest next update: Sat 25 Jul 2026 00:38:04 +0000
Files and hashes: 1: 37372e38312e37362e302f32342d3234203d3e203438353932.roa (hash: xdM7OBZ/9TbpR6di66FXGgK7azfT3ftRTjEe6Yt/SjQ=)
2: 3138352e33392e3138312e302f32342d3234203d3e203438353932.roa (hash: wPa88HthyMje0FC4DyK9XcGEOLxJkylfsOcQDqr+i80=)
3: 37372e38312e37392e302f32342d3234203d3e2036303739.roa (hash: CJIevw70hXk1ZbxNXn1s8ukayMRMzgKM7Ytd97RL5pI=)
4: 3139342e32362e32312e302f32342d3234203d3e2036303739.roa (hash: PXc6iwOgxftDj1gzf8ORi/W4+N4fkSzIW7L2p1ULJyk=)
5: 37372e38312e37392e302f32342d3234203d3e20343032323336.roa (hash: M2dmsDaCkf9RNR7OAA/qGmqHIFBJr7jscLVBUWk8SoM=)
6: 37372e38312e38322e302f32342d3234203d3e203438353932.roa (hash: d5TxhwAkeXwrF6uRbXxfjKGJfxHDWIa7sLTALcjfvN4=)
7: 37372e38312e37382e302f32342d3234203d3e203438353932.roa (hash: 5R59EysS9tL6UTIvemaJCrtszj6x6/cuKApXJ2KN9Lk=)
8: 3139342e32362e322e302f32342d3234203d3e20343032323336.roa (hash: Svrr+wgr/nQThaTFfhRBjAYu9J8WfdukPNEs2F7UKRs=)
9: 37372e38312e37372e302f32342d3234203d3e203438323636.roa (hash: 5I0vOu7kvIMlEY7Sq8XZtvSWHaZxS4B46RvJVyxx8WI=)
10: 3139342e32362e32302e302f32342d3234203d3e20323132323338.roa (hash: 39u3b1aPs44ID+slKDmXnVmqBOUo9+ShXVBFlRqmNOw=)
11: 3132382e36352e3136302e302f32322d3232203d3e203438353932.roa (hash: A3pVDR25ByDI5MeiQGGyctYtEVKjmHED5jwJjMlcbk4=)
12: 3139342e32362e32312e302f32342d3234203d3e20343032323336.roa (hash: pUa1ndniCOYV9ES6BNwWdFcD47r2QhLmtLoNdmF7rhw=)
13: 3139342e32362e322e302f32342d3234203d3e2036303739.roa (hash: eXWT+PlyOnJLCf8fJSBgFCoZbaqBMmvm3nL9Np0p08s=)
14: 3231322e34372e33362e302f32342d3234203d3e2039333138.roa (hash: ZVXQWb7gEfqAkq16Ky0ZSqFCIZ2vC/M8/7YAMrFhXy0=)
15: 45E8648E445DCCD0D8EE699F5140BB814E43AE1B.crl (hash: M3f1hEmjXCI2mdzXZbzazQuef3PQ1PucXjsYBzJvP40=)
16: 3132382e36352e3136342e302f32322d3232203d3e2033333230.roa (hash: MdPKw7OONGYXcOZWO/o2hEi1vtA1V+k+wu8N5c3I5aE=)
17: 3139332e3234362e3136342e302f32342d3234203d3e20323134343332.roa (hash: dY1TZgYtt2XOIsVBxW8tOuYVl+qsqJFS06ZKgYUYzuc=)
18: 3138352e33392e3138302e302f32342d3234203d3e203438353932.roa (hash: ZWyLSTcE9mAQsDVjLP4sbforwwRF0gy7YQkGUCm2B9s=)
19: 3138352e33392e3138322e302f32342d3234203d3e203438353932.roa (hash: 2GU98PVW8A06wPHFP07dWrMXh03+0FNfaArisd+625g=)
20: 3138382e3231342e3233322e302f32332d3234203d3e2035303635.roa (hash: x3PmGOoet0cDs7+uuyuNJtaOTgdNjDt0p0iGeQg4oNo=)
21: 37372e38312e38332e302f32342d3234203d3e203438353932.roa (hash: Tv5q+rfM3afhLe0aBDFGLWT8PXWC4GLzMQF3H6VLFL8=)
22: 3138352e33392e3138332e302f32342d3234203d3e203438353932.roa (hash: 5y1BpEcUWIqqauwo2u2KJKPFMCa0JPAhvtiDqGTVDHw=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/933b2fd7-31c1-451c-8288-c1aa0aa12750/0/45E8648E445DCCD0D8EE699F5140BB814E43AE1B.crl
rsync://rsync.paas.rpki.ripe.net/repository/933b2fd7-31c1-451c-8288-c1aa0aa12750/0/45E8648E445DCCD0D8EE699F5140BB814E43AE1B.mft
rsync://rpki.ripe.net/repository/DEFAULT/RehkjkRdzNDY7mmfUUC7gU5Drhs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 00:38:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
31:0f:b9:62:2a:f7:ed:ca:8c:3d:d0:e6:0b:5a:81:81:de:b1:ed:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=45e8648e445dccd0d8ee699f5140bb814e43ae1b
Validity
Not Before: Jul 23 23:57:04 2026 GMT
Not After : Jul 25 00:38:04 2026 GMT
Subject: CN=245C85EFC8545F1ED73C62CA8ABEFEF06400A67D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:1d:94:e2:bd:fa:fd:d6:39:7b:d8:5f:a4:7c:
eb:e3:e5:de:df:ad:ac:71:1c:c0:16:bd:00:3d:1b:
01:0c:9f:8e:ad:a8:8a:46:74:ab:12:41:ce:5c:30:
f0:0f:a8:93:cb:18:b7:90:e1:2e:6c:72:f9:8d:cf:
63:11:ba:24:e9:15:98:73:fc:ce:61:be:b0:da:76:
9d:28:8d:fb:19:64:84:9a:e2:69:bd:ce:2d:a1:50:
f5:67:52:42:a1:83:88:c6:db:d3:ea:1b:35:8e:df:
5f:89:98:29:c2:bd:26:ae:c4:f3:9b:67:ad:77:24:
8b:74:09:40:50:25:50:75:92:e3:09:aa:78:b8:50:
45:26:55:2c:a7:92:cb:18:d9:11:f0:53:97:79:f0:
ac:c8:f4:55:87:f9:42:cb:56:a5:c3:8b:07:59:0c:
d4:0d:df:4d:13:0d:b5:5f:ec:e9:72:8f:97:ee:71:
41:3d:41:94:3c:bd:2c:63:88:63:47:ff:02:f2:3b:
48:14:53:76:09:31:d2:84:5b:77:ea:21:49:38:21:
63:ae:7e:b4:25:f5:3c:b8:d5:0e:7d:8c:6d:fd:b7:
29:69:98:73:46:4d:3f:7b:a7:1f:15:ce:95:7f:be:
65:49:72:b0:2c:5e:45:ba:62:96:4e:64:db:83:39:
37:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:5C:85:EF:C8:54:5F:1E:D7:3C:62:CA:8A:BE:FE:F0:64:00:A6:7D
X509v3 Authority Key Identifier:
keyid:45:E8:64:8E:44:5D:CC:D0:D8:EE:69:9F:51:40:BB:81:4E:43:AE:1B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/933b2fd7-31c1-451c-8288-c1aa0aa12750/0/45E8648E445DCCD0D8EE699F5140BB814E43AE1B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RehkjkRdzNDY7mmfUUC7gU5Drhs.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/933b2fd7-31c1-451c-8288-c1aa0aa12750/0/45E8648E445DCCD0D8EE699F5140BB814E43AE1B.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
aa:82:bf:9e:3d:05:cc:70:9a:0e:57:12:40:34:83:ad:7d:16:
b5:bd:e5:c6:39:86:6c:38:9d:89:90:43:dc:4f:22:3d:c5:33:
39:51:7e:00:1e:dd:f9:cb:b5:d9:7c:02:0a:1d:56:d2:f9:54:
65:e7:ea:18:60:bd:10:0b:83:f4:40:2d:a7:4a:4e:2b:2c:cd:
51:ce:52:f5:3f:e7:03:4a:6b:a8:6b:c6:09:ed:db:cd:e9:7b:
2b:40:62:d9:e7:a3:ca:8e:a8:dc:96:16:c3:ff:e6:15:74:84:
40:53:4f:81:6e:11:73:26:03:de:57:bc:2d:e9:38:3d:4b:8c:
98:02:a6:50:7c:47:09:c3:e6:73:f3:35:30:c8:f1:7b:cb:78:
70:bb:48:a0:1f:ae:a8:79:a2:e2:d5:53:73:f5:04:60:e0:4b:
b1:24:4d:eb:3a:d6:04:23:79:b5:41:52:44:78:52:3c:a0:7a:
52:c8:f2:62:32:d1:97:a9:21:ee:03:b9:fa:ee:6e:c4:be:06:
c8:27:89:dc:b0:d0:ad:53:b1:59:eb:1c:e0:aa:01:6f:b3:30:
75:28:de:d4:22:e7:ac:27:51:1e:48:42:e7:fb:32:5f:b0:22:
95:26:82:a5:5b:62:9e:3e:c8:e0:b4:2e:69:dc:7e:e6:71:2b:
c1:50:cd:c5
-----BEGIN CERTIFICATE-----
MIIFPTCCBCWgAwIBAgIUMQ+5Yir37cqMPdDmC1qBgd6x7UMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDVlODY0OGU0NDVkY2NkMGQ4ZWU2OTlmNTE0MGJiODE0
ZTQzYWUxYjAeFw0yNjA3MjMyMzU3MDRaFw0yNjA3MjUwMDM4MDRaMDMxMTAvBgNV
BAMTKDI0NUM4NUVGQzg1NDVGMUVENzNDNjJDQThBQkVGRUYwNjQwMEE2N0QwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCfHZTivfr91jl72F+kfOvj5d7f
raxxHMAWvQA9GwEMn46tqIpGdKsSQc5cMPAPqJPLGLeQ4S5scvmNz2MRuiTpFZhz
/M5hvrDadp0ojfsZZISa4mm9zi2hUPVnUkKhg4jG29PqGzWO31+JmCnCvSauxPOb
Z613JIt0CUBQJVB1kuMJqni4UEUmVSynkssY2RHwU5d58KzI9FWH+ULLVqXDiwdZ
DNQN300TDbVf7Olyj5fucUE9QZQ8vSxjiGNH/wLyO0gUU3YJMdKEW3fqIUk4IWOu
frQl9Ty41Q59jG39tylpmHNGTT97px8VzpV/vmVJcrAsXkW6YpZOZNuDOTf/AgMB
AAGjggJHMIICQzAdBgNVHQ4EFgQUJFyF78hUXx7XPGLKir7+8GQApn0wHwYDVR0j
BBgwFoAURehkjkRdzNDY7mmfUUC7gU5DrhswDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvOTMzYjJmZDctMzFjMS00NTFjLTgyODgtYzFhYTBhYTEy
NzUwLzAvNDVFODY0OEU0NDVEQ0NEMEQ4RUU2OTlGNTE0MEJCODE0RTQzQUUxQi5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1JlaGtqa1Jkek5EWTdtbWZVVUM3Z1U1
RHJocy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6
Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS85MzNiMmZkNy0z
MWMxLTQ1MWMtODI4OC1jMWFhMGFhMTI3NTAvMC80NUU4NjQ4RTQ0NURDQ0QwRDhF
RTY5OUY1MTQwQkI4MTRFNDNBRTFCLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF
Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH
AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqoK/nj0FzHCaDlcSQDSD
rX0Wtb3lxjmGbDidiZBD3E8iPcUzOVF+AB7d+cu12XwCCh1W0vlUZefqGGC9EAuD
9EAtp0pOKyzNUc5S9T/nA0prqGvGCe3bzel7K0Bi2eejyo6o3JYWw//mFXSEQFNP
gW4RcyYD3le8Lek4PUuMmAKmUHxHCcPmc/M1MMjxe8t4cLtIoB+uqHmi4tVTc/UE
YOBLsSRN6zrWBCN5tUFSRHhSPKB6UsjyYjLRl6kh7gO5+u5uxL4GyCeJ3LDQrVOx
Wesc4KoBb7MwdSje1CLnrCdRHkhC5/syX7AilSaCpVtinj7I4LQuadx+5nErwVDN
xQ==
-----END CERTIFICATE-----
Generated at Fri Jul 24 11:02:38 2026 by rpki-client