
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ac/572ea6-1436-4f26-af57-5975913f52c5/1/87VkazYDeZJMttnD2ZZpzn87LKI.mft
File: 87VkazYDeZJMttnD2ZZpzn87LKI.mft (raw, json)
Hash identifier: ++KuZ8wBONDUDsDV3oJlKl1Vlg81gJBF38L9lHDLciU=
Subject key identifier: AE:06:61:C5:58:F8:59:43:62:74:EF:2B:AB:86:6A:B1:9E:39:78:21
Authority key identifier: F3:B5:64:6B:36:03:79:92:4C:B6:D9:C3:D9:96:69:CE:7F:3B:2C:A2
Certificate issuer: /CN=f3b5646b360379924cb6d9c3d99669ce7f3b2ca2
Certificate serial: 01A18006313EA867AF1D6D6F88C0F4902DD5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/87VkazYDeZJMttnD2ZZpzn87LKI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/572ea6-1436-4f26-af57-5975913f52c5/1/87VkazYDeZJMttnD2ZZpzn87LKI.mft
Manifest number: 1AD2
Signing time: Wed 28 Oct 2026 01:00:51 +0000
Manifest this update: Wed 28 Oct 2026 01:00:51 +0000
Manifest next update: Thu 29 Oct 2026 01:00:51 +0000
Files and hashes: 1: 87VkazYDeZJMttnD2ZZpzn87LKI.crl (hash: 0U3uE/HG6p7PIBrFfDd0ShM4W7TRmIRJVlx6AUO+m0Q=)
2: K2pv1joH33JGXTFgdf1GvHFNyOI.roa (hash: ZEpuJAN3j9YTqui19t7uNFdffmnYfLWbwWbEMfD7KU0=)
3: Qa4j2vggkqNGhqUJxufFEhTXf1Q.roa (hash: /qjjWw69vtyAWOv6PADeDd1WN8SkDOm5Fp4obHAorbY=)
4: R7B3oum7BpCTPNvgBRsQX2z2FVg.roa (hash: 1yQXxJ0NPuLrgm3ZJmbrNpelz2efuDlLTtJpmLa5Lyk=)
5: frdjE4Wx38p5EUYNv0lgccc2f1Q.roa (hash: JurRqiiO3KqAIZd8NOglvrx6zYK4Dcv5SLr7KkdNG1w=)
6: h1UT6NFg3ZpYeiiCgHRBp-1U-NA.roa (hash: Xy3UzarjqLczIZsj3TWwqdDs3SH1huHxF+E73HFRf1M=)
7: o8eX56TS1SQhGzwJAmHIqx0vW0U.roa (hash: DbuFGcW2GBDvibRV74wfir2bnFicP07zDNDVvnpsCHw=)
8: smEJ6hLs20YbGMTT0hsZU0Olco8.roa (hash: 64a/5YDgJXJtCa0mUs/71cssAkwI0Nj2x00SBWT2qXI=)
9: w0B2Gqbwfzp_NJu2rxJWtvJ41DE.roa (hash: AOaMAW39Y9aDj5YPj7EZWpYQeaBZN2RRoty+ksqKsB0=)
10: z-UevhOt9DbJ3mo4g9NjEb9nzTg.roa (hash: IuS71qLi3haAYiRwxpMdF13P+Vv7zxjdP29UxCKm7CU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/572ea6-1436-4f26-af57-5975913f52c5/1/87VkazYDeZJMttnD2ZZpzn87LKI.crl
rsync://rpki.ripe.net/repository/DEFAULT/ac/572ea6-1436-4f26-af57-5975913f52c5/1/87VkazYDeZJMttnD2ZZpzn87LKI.mft
rsync://rpki.ripe.net/repository/DEFAULT/87VkazYDeZJMttnD2ZZpzn87LKI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 29 Oct 2026 01:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:80:06:31:3e:a8:67:af:1d:6d:6f:88:c0:f4:90:2d:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f3b5646b360379924cb6d9c3d99669ce7f3b2ca2
Validity
Not Before: Oct 28 01:00:51 2026 GMT
Not After : Oct 29 01:00:51 2026 GMT
Subject: CN=ae0661c558f859436274ef2bab866ab19e397821
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:7a:6e:49:a7:34:ee:02:e9:11:5c:41:b0:9e:
84:5e:b9:e6:a7:7b:47:b0:e4:22:b0:b7:d8:45:66:
25:bd:03:3d:76:3f:83:b6:ee:97:55:8a:e8:b0:fc:
25:6c:79:19:11:d8:8b:17:5b:36:29:6c:b5:e1:7d:
ae:6b:e5:18:ce:4a:1f:c0:9c:88:e6:f0:ce:fc:a4:
85:77:00:30:c2:ec:ad:e7:78:1f:98:2f:f6:ca:8f:
50:e5:75:88:39:44:af:2b:14:c5:16:b0:00:6d:3a:
75:3d:07:29:d9:c9:79:bc:66:bf:9e:67:bb:a3:fd:
a3:57:62:4e:a2:79:13:81:d6:63:6a:91:4d:42:98:
d2:cf:44:00:de:41:12:2a:da:83:9f:03:1d:ec:1c:
6f:62:3a:88:d4:e2:77:c5:a0:b9:3d:f7:e3:38:04:
72:bd:9f:9e:fa:b7:a7:5c:75:cd:4d:5d:a5:3f:4a:
90:4b:dc:29:c9:57:2c:f6:da:74:33:56:d4:6f:d5:
08:53:a0:88:28:7d:20:59:94:22:4c:9b:f3:62:bb:
b6:80:c9:2e:6a:ff:24:99:ff:85:6b:f4:99:ce:97:
58:7d:c6:39:d8:18:b7:dc:ef:46:73:33:d7:8f:3c:
6e:54:09:31:94:ff:9f:fa:a8:60:ad:55:a9:a5:c4:
3c:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:06:61:C5:58:F8:59:43:62:74:EF:2B:AB:86:6A:B1:9E:39:78:21
X509v3 Authority Key Identifier:
keyid:F3:B5:64:6B:36:03:79:92:4C:B6:D9:C3:D9:96:69:CE:7F:3B:2C:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/87VkazYDeZJMttnD2ZZpzn87LKI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/572ea6-1436-4f26-af57-5975913f52c5/1/87VkazYDeZJMttnD2ZZpzn87LKI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/572ea6-1436-4f26-af57-5975913f52c5/1/87VkazYDeZJMttnD2ZZpzn87LKI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
99:65:0f:0f:d1:b2:f2:08:9d:bb:aa:c7:6f:79:48:c3:da:dd:
62:5c:16:3c:a6:eb:a0:90:17:e1:1b:b1:11:32:8a:91:83:ba:
04:de:7a:33:86:d8:89:20:9c:f5:22:e2:8e:8f:3b:89:64:62:
6c:3f:39:3b:89:a7:0a:df:66:8d:1a:f0:0c:ff:74:a5:69:07:
0e:e1:bb:38:80:d6:d5:52:97:cd:af:97:b8:44:cf:4a:73:ec:
b3:1c:06:86:92:5a:d3:51:bf:51:cc:95:44:63:41:8f:86:f1:
c6:1c:79:3d:9c:6a:bf:e2:54:ec:df:b4:c6:e2:fc:07:96:0c:
d3:ad:ea:2b:3d:77:73:6c:95:01:f5:93:63:b5:0a:04:30:eb:
92:cf:6f:0b:20:91:d2:2a:a0:13:e1:4e:64:4d:de:10:d6:7b:
2c:be:d3:86:e0:f9:c8:96:57:5a:02:9b:08:02:7a:b7:fb:4d:
bc:fa:e1:f4:30:c1:a7:4a:11:6e:b7:bf:03:0d:af:e8:d8:9c:
45:cd:dc:11:72:39:6d:90:1c:f8:56:74:3c:b0:4f:85:7d:73:
8d:9c:a7:4a:8b:a2:72:a8:91:b7:e4:11:34:bc:64:95:52:19:
97:fa:45:a1:93:30:80:4f:f8:57:09:35:1c:04:bd:f1:75:0d:
db:4e:1a:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 28 11:51:24 2026 by rpki-client