
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/933b2fd7-31c1-451c-8288-c1aa0aa12750/0/45E8648E445DCCD0D8EE699F5140BB814E43AE1B.mft
File: 45E8648E445DCCD0D8EE699F5140BB814E43AE1B.mft (raw, json)
Hash identifier: JzAcSTk1dRiexL6qPPvmBJclnH4iMCJLNT2nnoIdFhc=
Subject key identifier: 31:24:2D:8F:16:7A:B3:7A:29:F5:79:8B:02:7B:D0:88:EB:FD:8C:B8
Authority key identifier: 45:E8:64:8E:44:5D:CC:D0:D8:EE:69:9F:51:40:BB:81:4E:43:AE:1B
Certificate issuer: /CN=45e8648e445dccd0d8ee699f5140bb814e43ae1b
Certificate serial: 2ED371DA1A2F5283919A09D692B0F10E0FEF1995
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RehkjkRdzNDY7mmfUUC7gU5Drhs.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/933b2fd7-31c1-451c-8288-c1aa0aa12750/0/45E8648E445DCCD0D8EE699F5140BB814E43AE1B.mft
Manifest number: 0338
Signing time: Sat 10 Oct 2026 00:37:53 +0000
Manifest this update: Sat 10 Oct 2026 00:32:53 +0000
Manifest next update: Sun 11 Oct 2026 02:37:53 +0000
Files and hashes: 1: 37372e38312e37362e302f32342d3234203d3e203438353932.roa (hash: xdM7OBZ/9TbpR6di66FXGgK7azfT3ftRTjEe6Yt/SjQ=)
2: 3139342e32362e322e302f32342d3234203d3e20343032323336.roa (hash: Svrr+wgr/nQThaTFfhRBjAYu9J8WfdukPNEs2F7UKRs=)
3: 37372e38312e37382e302f32342d3234203d3e203438353932.roa (hash: 5R59EysS9tL6UTIvemaJCrtszj6x6/cuKApXJ2KN9Lk=)
4: 3231322e34372e33362e302f32342d3234203d3e2039333138.roa (hash: ZVXQWb7gEfqAkq16Ky0ZSqFCIZ2vC/M8/7YAMrFhXy0=)
5: 37372e38312e37372e302f32342d3234203d3e203438323636.roa (hash: 5I0vOu7kvIMlEY7Sq8XZtvSWHaZxS4B46RvJVyxx8WI=)
6: 3139342e32362e32302e302f32342d3234203d3e20323132323338.roa (hash: 39u3b1aPs44ID+slKDmXnVmqBOUo9+ShXVBFlRqmNOw=)
7: 37372e38312e38332e302f32342d3234203d3e203438353932.roa (hash: Tv5q+rfM3afhLe0aBDFGLWT8PXWC4GLzMQF3H6VLFL8=)
8: 3132382e36352e3136302e302f32322d3232203d3e203438353932.roa (hash: A3pVDR25ByDI5MeiQGGyctYtEVKjmHED5jwJjMlcbk4=)
9: 45E8648E445DCCD0D8EE699F5140BB814E43AE1B.crl (hash: wYhd/hIqUhTA+ty0doCDp6s8grYLjiKCOTz0AW+xKnc=)
10: 3138352e33392e3138312e302f32342d3234203d3e203438353932.roa (hash: wPa88HthyMje0FC4DyK9XcGEOLxJkylfsOcQDqr+i80=)
11: 37372e38312e38322e302f32342d3234203d3e203438353932.roa (hash: d5TxhwAkeXwrF6uRbXxfjKGJfxHDWIa7sLTALcjfvN4=)
12: 3138352e33392e3138302e302f32342d3234203d3e203438353932.roa (hash: ZWyLSTcE9mAQsDVjLP4sbforwwRF0gy7YQkGUCm2B9s=)
13: 3139332e3234362e3136352e302f32342d3234203d3e20343031323935.roa (hash: L44J+BEkrVdft9AVRNXbl2gKqXXH8VsPAtFPRC3L9uU=)
14: 3138352e33392e3138322e302f32342d3234203d3e203438353932.roa (hash: 2GU98PVW8A06wPHFP07dWrMXh03+0FNfaArisd+625g=)
15: 39312e3230392e3137392e302f32342d3234203d3e2036303739.roa (hash: uNAQ4j+11GZvakb42sQCtDYoj40PG7WcMOyOEXVSeKA=)
16: 3132382e36352e3137322e302f32322d3234203d3e203330303432.roa (hash: DSlvyhOE27ifyw6VjV6XrUzDbR/BoOjnZsqvdmTDr1Q=)
17: 3139342e32362e332e302f32342d3234203d3e203437313732.roa (hash: WecgztBCMOrv7RFn52YrsqTbPYVeZl+PuqJXDN3/21E=)
18: 3139342e32362e322e302f32342d3234203d3e2036303739.roa (hash: eXWT+PlyOnJLCf8fJSBgFCoZbaqBMmvm3nL9Np0p08s=)
19: 3138352e33392e3138332e302f32342d3234203d3e203438353932.roa (hash: 5y1BpEcUWIqqauwo2u2KJKPFMCa0JPAhvtiDqGTVDHw=)
20: 3139342e32362e32312e302f32342d3234203d3e20343032323336.roa (hash: pUa1ndniCOYV9ES6BNwWdFcD47r2QhLmtLoNdmF7rhw=)
21: 3132382e36352e3136342e302f32322d3232203d3e2033333230.roa (hash: MdPKw7OONGYXcOZWO/o2hEi1vtA1V+k+wu8N5c3I5aE=)
22: 3132382e36352e3136382e302f32322d3234203d3e203330303432.roa (hash: 7BzSmJ15P3QTS60gWSlFZO7HXz+m8LuLu0WYkYzrW3Q=)
23: 3139332e3234362e3136342e302f32342d3234203d3e20323134343332.roa (hash: dY1TZgYtt2XOIsVBxW8tOuYVl+qsqJFS06ZKgYUYzuc=)
24: 37372e38312e37392e302f32342d3234203d3e20343032323336.roa (hash: M2dmsDaCkf9RNR7OAA/qGmqHIFBJr7jscLVBUWk8SoM=)
25: 3138382e3231342e3233322e302f32332d3234203d3e2035303635.roa (hash: x3PmGOoet0cDs7+uuyuNJtaOTgdNjDt0p0iGeQg4oNo=)
26: 3139342e32362e32312e302f32342d3234203d3e2036303739.roa (hash: PXc6iwOgxftDj1gzf8ORi/W4+N4fkSzIW7L2p1ULJyk=)
27: 37372e38312e37392e302f32342d3234203d3e2036303739.roa (hash: CJIevw70hXk1ZbxNXn1s8ukayMRMzgKM7Ytd97RL5pI=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/933b2fd7-31c1-451c-8288-c1aa0aa12750/0/45E8648E445DCCD0D8EE699F5140BB814E43AE1B.crl
rsync://rsync.paas.rpki.ripe.net/repository/933b2fd7-31c1-451c-8288-c1aa0aa12750/0/45E8648E445DCCD0D8EE699F5140BB814E43AE1B.mft
rsync://rpki.ripe.net/repository/DEFAULT/RehkjkRdzNDY7mmfUUC7gU5Drhs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 Oct 2026 02:37:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2e:d3:71:da:1a:2f:52:83:91:9a:09:d6:92:b0:f1:0e:0f:ef:19:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=45e8648e445dccd0d8ee699f5140bb814e43ae1b
Validity
Not Before: Oct 10 00:32:53 2026 GMT
Not After : Oct 11 02:37:53 2026 GMT
Subject: CN=31242D8F167AB37A29F5798B027BD088EBFD8CB8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:6b:d9:b1:59:70:62:b6:e1:b7:b7:d0:ba:f2:
b7:b5:c6:9d:c8:f4:e2:70:e2:c6:ca:f9:d2:9f:ae:
f8:8e:3a:65:a0:80:a3:9b:00:0d:87:56:d3:34:5c:
b9:e5:96:5a:6f:7f:d5:2b:a4:23:be:04:c6:3b:3b:
e1:36:46:49:16:64:3a:c2:5e:b1:d9:7e:d0:fa:56:
ee:a1:79:bd:86:c8:f6:c9:85:db:20:03:a7:ac:ed:
10:ca:aa:14:a8:f2:08:59:85:d0:2e:ff:4d:3b:31:
07:51:8b:a9:d2:a8:6c:08:92:48:9d:bc:7d:f6:02:
12:a4:d2:0c:25:0f:16:3f:c6:03:54:24:2c:a8:84:
87:74:70:d6:6e:3a:82:95:27:c7:fa:a4:74:84:12:
68:e2:a2:68:a8:cd:a2:e5:b8:3f:34:5a:fd:96:33:
cf:ca:25:80:01:a6:d8:b1:b6:7f:59:57:5f:3a:3d:
91:2c:2d:48:a7:c8:90:66:0f:31:af:7a:a6:fe:38:
6d:4b:06:8c:c8:d5:d2:9d:41:af:e6:1f:d7:4e:b9:
0e:54:94:46:9f:c7:35:98:1a:c9:6e:d4:6a:28:a8:
ea:8d:ef:42:fc:ab:f3:70:e9:1c:0f:05:88:ee:21:
e3:74:bf:4f:85:8d:e2:1c:d9:c0:ed:fe:9d:e9:f8:
a0:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:24:2D:8F:16:7A:B3:7A:29:F5:79:8B:02:7B:D0:88:EB:FD:8C:B8
X509v3 Authority Key Identifier:
keyid:45:E8:64:8E:44:5D:CC:D0:D8:EE:69:9F:51:40:BB:81:4E:43:AE:1B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/933b2fd7-31c1-451c-8288-c1aa0aa12750/0/45E8648E445DCCD0D8EE699F5140BB814E43AE1B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RehkjkRdzNDY7mmfUUC7gU5Drhs.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/933b2fd7-31c1-451c-8288-c1aa0aa12750/0/45E8648E445DCCD0D8EE699F5140BB814E43AE1B.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:2e:37:ad:a1:86:92:81:31:7b:09:15:86:63:70:fd:04:d5:
08:65:27:2f:7f:df:4a:f9:aa:f2:55:cd:8c:f7:4c:93:3e:20:
45:44:1d:37:1f:60:49:82:ec:f1:b2:f1:5b:4c:53:7a:4f:72:
ae:00:e8:18:ba:7d:bf:8d:bc:5c:91:cf:4e:41:7c:f7:8a:1e:
af:2a:aa:7e:ce:89:df:ee:8b:1d:40:25:41:c8:f6:f9:ab:a1:
d3:f6:ad:86:9e:f0:f1:82:d3:17:2c:80:78:00:88:6c:c3:63:
e7:9f:6e:c7:e0:d8:0b:d2:93:b3:50:78:94:06:cd:76:f8:b2:
ab:38:06:f9:f3:e7:af:93:a4:e3:9a:de:75:9a:fa:73:78:66:
21:d9:5e:77:32:c2:2c:3d:cf:24:b9:dd:f6:3a:01:43:57:c0:
d1:65:29:0f:ef:88:0b:1b:12:11:29:b6:cd:12:24:92:e8:16:
46:9c:86:ce:c7:a2:3b:ac:a6:e3:74:4c:9f:b5:fd:82:28:71:
13:0b:9d:f0:8e:66:0c:4f:2e:f8:6a:44:ad:3f:01:5c:14:48:
fd:fa:54:22:81:09:54:d2:c2:39:69:dc:df:fb:70:e7:a5:3d:
a2:93:4f:91:f3:32:f3:6a:70:f9:c0:ff:62:75:de:c6:9f:47:
2a:1f:d7:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 10 14:57:20 2026 by rpki-client