
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/572ea6-1436-4f26-af57-5975913f52c5/1/87VkazYDeZJMttnD2ZZpzn87LKI.mft
File: 87VkazYDeZJMttnD2ZZpzn87LKI.mft (raw, json)
Hash identifier: ADqllnnKn/+sP070z1G4FEglg3qKzC4VTkpIIar7g1M=
Subject key identifier: C4:CF:19:04:37:C2:DD:F1:0C:21:C2:DA:6A:56:0D:5D:90:84:A0:A8
Authority key identifier: F3:B5:64:6B:36:03:79:92:4C:B6:D9:C3:D9:96:69:CE:7F:3B:2C:A2
Certificate issuer: /CN=f3b5646b360379924cb6d9c3d99669ce7f3b2ca2
Certificate serial: 019FA116BB815ABF3B47446D799C3FC1345A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/87VkazYDeZJMttnD2ZZpzn87LKI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/572ea6-1436-4f26-af57-5975913f52c5/1/87VkazYDeZJMttnD2ZZpzn87LKI.mft
Manifest number: 19DA
Signing time: Mon 27 Jul 2026 01:00:49 +0000
Manifest this update: Mon 27 Jul 2026 01:00:49 +0000
Manifest next update: Tue 28 Jul 2026 01:00:49 +0000
Files and hashes: 1: 87VkazYDeZJMttnD2ZZpzn87LKI.crl (hash: KygmqWNNOB/QoYzRBEN0riRO+r41JSDYguaBPxAmuqU=)
2: K2pv1joH33JGXTFgdf1GvHFNyOI.roa (hash: ZEpuJAN3j9YTqui19t7uNFdffmnYfLWbwWbEMfD7KU0=)
3: Qa4j2vggkqNGhqUJxufFEhTXf1Q.roa (hash: /qjjWw69vtyAWOv6PADeDd1WN8SkDOm5Fp4obHAorbY=)
4: R7B3oum7BpCTPNvgBRsQX2z2FVg.roa (hash: 1yQXxJ0NPuLrgm3ZJmbrNpelz2efuDlLTtJpmLa5Lyk=)
5: frdjE4Wx38p5EUYNv0lgccc2f1Q.roa (hash: JurRqiiO3KqAIZd8NOglvrx6zYK4Dcv5SLr7KkdNG1w=)
6: h1UT6NFg3ZpYeiiCgHRBp-1U-NA.roa (hash: Xy3UzarjqLczIZsj3TWwqdDs3SH1huHxF+E73HFRf1M=)
7: o8eX56TS1SQhGzwJAmHIqx0vW0U.roa (hash: DbuFGcW2GBDvibRV74wfir2bnFicP07zDNDVvnpsCHw=)
8: smEJ6hLs20YbGMTT0hsZU0Olco8.roa (hash: 64a/5YDgJXJtCa0mUs/71cssAkwI0Nj2x00SBWT2qXI=)
9: w0B2Gqbwfzp_NJu2rxJWtvJ41DE.roa (hash: AOaMAW39Y9aDj5YPj7EZWpYQeaBZN2RRoty+ksqKsB0=)
10: z-UevhOt9DbJ3mo4g9NjEb9nzTg.roa (hash: IuS71qLi3haAYiRwxpMdF13P+Vv7zxjdP29UxCKm7CU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/572ea6-1436-4f26-af57-5975913f52c5/1/87VkazYDeZJMttnD2ZZpzn87LKI.crl
rsync://rpki.ripe.net/repository/DEFAULT/ac/572ea6-1436-4f26-af57-5975913f52c5/1/87VkazYDeZJMttnD2ZZpzn87LKI.mft
rsync://rpki.ripe.net/repository/DEFAULT/87VkazYDeZJMttnD2ZZpzn87LKI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a1:16:bb:81:5a:bf:3b:47:44:6d:79:9c:3f:c1:34:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f3b5646b360379924cb6d9c3d99669ce7f3b2ca2
Validity
Not Before: Jul 27 01:00:49 2026 GMT
Not After : Jul 28 01:00:49 2026 GMT
Subject: CN=c4cf190437c2ddf10c21c2da6a560d5d9084a0a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:df:db:cc:6a:74:2b:7f:da:63:f0:d8:09:0e:
cc:e1:56:7c:3d:05:38:e6:60:ee:f4:23:a5:58:7a:
bf:be:e5:84:29:3f:7e:b5:4c:1e:3f:f2:15:0d:d6:
cd:43:72:d5:b1:42:97:35:43:8f:5e:4c:b2:1f:95:
9a:dc:c7:03:2a:b6:86:bb:de:2d:93:69:ce:48:b2:
ad:c5:05:f2:de:a7:66:70:77:72:fe:7b:ea:7e:a2:
c9:15:2f:df:b0:2b:ae:f7:46:6b:e6:be:b2:62:44:
a1:89:e0:b0:28:e5:73:a3:44:06:96:58:21:d1:49:
94:80:df:fb:27:e2:77:b1:e7:36:fa:bc:5c:50:a5:
69:54:c5:e5:a1:ac:0b:19:24:4d:c3:86:20:22:b1:
10:b0:a9:c8:b2:4a:91:f5:d2:aa:17:cb:8e:82:f9:
45:10:ba:f1:12:cc:e1:90:46:29:4d:2e:a7:32:62:
ed:9c:62:62:df:3a:8b:30:4e:96:29:7e:4d:df:3a:
14:df:31:02:fc:88:e0:b1:1a:b5:1b:2c:45:91:af:
4a:69:9d:0a:ac:a5:57:94:16:bf:d5:f2:d6:8b:23:
e5:94:7b:d0:9d:9f:b8:9b:a8:6d:db:be:68:27:80:
0e:72:a5:be:2d:ee:80:0d:6d:85:56:ad:3d:c0:2b:
c8:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:CF:19:04:37:C2:DD:F1:0C:21:C2:DA:6A:56:0D:5D:90:84:A0:A8
X509v3 Authority Key Identifier:
keyid:F3:B5:64:6B:36:03:79:92:4C:B6:D9:C3:D9:96:69:CE:7F:3B:2C:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/87VkazYDeZJMttnD2ZZpzn87LKI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/572ea6-1436-4f26-af57-5975913f52c5/1/87VkazYDeZJMttnD2ZZpzn87LKI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/572ea6-1436-4f26-af57-5975913f52c5/1/87VkazYDeZJMttnD2ZZpzn87LKI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:5a:c9:76:30:32:86:b7:7e:0b:1c:ee:2f:47:6d:b8:b2:b5:
3e:04:64:b4:e0:e2:26:bf:2f:5d:b2:8b:aa:89:78:f8:d3:11:
77:05:68:1c:14:c2:40:5e:90:6f:04:b1:5a:c2:08:ea:80:6b:
f7:1b:c0:28:51:2b:93:04:8c:fa:47:c2:e5:46:ba:f2:c6:fe:
fc:ae:59:39:81:a5:03:96:be:0a:9d:3d:9e:b4:4d:82:a3:89:
10:ed:8c:c4:b2:47:3b:0d:fa:b6:09:ff:37:9b:4a:d9:8b:a4:
ad:66:78:dd:28:ac:b5:0d:5b:95:bf:c7:ea:9a:c0:0b:46:25:
96:4d:1c:c4:84:d0:ea:a2:8f:05:18:2a:ac:8c:45:d4:cb:27:
37:97:7c:c3:76:2a:00:7c:be:b4:32:79:14:02:2e:30:16:83:
00:50:6f:07:68:03:a6:af:dc:b5:46:b8:1f:d9:e6:aa:a6:bf:
c9:d5:2c:32:b0:37:58:c2:d1:f9:8d:b1:3f:f7:47:e2:e5:42:
3c:b0:8d:ce:6f:37:41:09:e0:b6:99:6f:7b:42:83:ad:47:1c:
fc:a6:b9:e5:09:f8:89:f9:26:21:3d:9a:e3:d8:0f:fb:07:c2:
49:e9:d7:55:c9:2f:44:a9:e4:bd:d5:94:48:5f:85:4d:95:e4:
f9:7c:c2:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 04:30:16 2026 by rpki-client