$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/572ea6-1436-4f26-af57-5975913f52c5/1/87VkazYDeZJMttnD2ZZpzn87LKI.mft File: 87VkazYDeZJMttnD2ZZpzn87LKI.mft (raw, json) Hash identifier: ChtuZ8wPdbr7V/OYBc5TNhJGQqC5KUTeuBBJewW5Ngs= Subject key identifier: EC:BB:A8:8D:51:A2:B0:65:AE:15:A8:9A:3E:7D:0D:B9:B9:4B:A1:B5 Authority key identifier: F3:B5:64:6B:36:03:79:92:4C:B6:D9:C3:D9:96:69:CE:7F:3B:2C:A2 Certificate issuer: /CN=f3b5646b360379924cb6d9c3d99669ce7f3b2ca2 Certificate serial: 019DCDBDE64676D7679CE61A12575A8BC82B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/87VkazYDeZJMttnD2ZZpzn87LKI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/572ea6-1436-4f26-af57-5975913f52c5/1/87VkazYDeZJMttnD2ZZpzn87LKI.mft Manifest number: 18E7 Signing time: Mon 27 Apr 2026 07:01:07 +0000 Manifest this update: Mon 27 Apr 2026 07:01:07 +0000 Manifest next update: Tue 28 Apr 2026 07:01:07 +0000 Files and hashes: 1: 87VkazYDeZJMttnD2ZZpzn87LKI.crl (hash: lKaLTSZac8683gGTFDuO5Y1vgoEVJTcEisvH1gPslJI=) 2: K2pv1joH33JGXTFgdf1GvHFNyOI.roa (hash: ZEpuJAN3j9YTqui19t7uNFdffmnYfLWbwWbEMfD7KU0=) 3: Qa4j2vggkqNGhqUJxufFEhTXf1Q.roa (hash: /qjjWw69vtyAWOv6PADeDd1WN8SkDOm5Fp4obHAorbY=) 4: R7B3oum7BpCTPNvgBRsQX2z2FVg.roa (hash: 1yQXxJ0NPuLrgm3ZJmbrNpelz2efuDlLTtJpmLa5Lyk=) 5: h1UT6NFg3ZpYeiiCgHRBp-1U-NA.roa (hash: Xy3UzarjqLczIZsj3TWwqdDs3SH1huHxF+E73HFRf1M=) 6: o8eX56TS1SQhGzwJAmHIqx0vW0U.roa (hash: DbuFGcW2GBDvibRV74wfir2bnFicP07zDNDVvnpsCHw=) 7: pdyHb8mFNixwJ_XvAUyJS_Ow2g4.roa (hash: OBr/r8tvBWJlq/QSHh/DOJUhlx6WHps7Ga/Udvbou0U=) 8: smEJ6hLs20YbGMTT0hsZU0Olco8.roa (hash: 64a/5YDgJXJtCa0mUs/71cssAkwI0Nj2x00SBWT2qXI=) 9: w0B2Gqbwfzp_NJu2rxJWtvJ41DE.roa (hash: AOaMAW39Y9aDj5YPj7EZWpYQeaBZN2RRoty+ksqKsB0=) 10: z-UevhOt9DbJ3mo4g9NjEb9nzTg.roa (hash: IuS71qLi3haAYiRwxpMdF13P+Vv7zxjdP29UxCKm7CU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/572ea6-1436-4f26-af57-5975913f52c5/1/87VkazYDeZJMttnD2ZZpzn87LKI.crl rsync://rpki.ripe.net/repository/DEFAULT/ac/572ea6-1436-4f26-af57-5975913f52c5/1/87VkazYDeZJMttnD2ZZpzn87LKI.mft rsync://rpki.ripe.net/repository/DEFAULT/87VkazYDeZJMttnD2ZZpzn87LKI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 28 Apr 2026 07:01:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9d:cd:bd:e6:46:76:d7:67:9c:e6:1a:12:57:5a:8b:c8:2b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f3b5646b360379924cb6d9c3d99669ce7f3b2ca2 Validity Not Before: Apr 27 07:01:07 2026 GMT Not After : Apr 28 07:01:07 2026 GMT Subject: CN=ecbba88d51a2b065ae15a89a3e7d0db9b94ba1b5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:de:ec:b8:7c:b4:a5:97:e9:1a:63:b7:a1:02: 20:90:59:8c:97:ab:71:b1:ee:f4:00:e7:bd:7a:99: f9:64:5a:0b:20:eb:82:58:ed:3a:14:c9:5c:dc:d7: 1e:15:47:c6:0c:68:c0:ea:9f:da:73:99:f4:ad:9d: 66:07:35:c8:94:37:21:47:8b:f2:5e:82:07:f2:b0: e7:4a:e6:17:d8:74:7a:af:37:f4:b5:76:28:82:02: 58:c3:4f:8a:dd:cb:8a:11:47:4d:17:ce:5a:2b:73: a7:d5:dc:af:c2:d7:01:8c:53:0c:f9:cd:86:e7:4d: 69:95:35:c6:40:63:a1:53:6c:c4:27:8a:a5:87:5e: 52:52:e8:6b:c0:26:2c:6f:d2:bb:67:ec:ea:68:b5: 63:92:f2:11:c6:0a:a4:b6:b3:70:9a:ee:c9:4a:f6: f4:ce:dd:be:3f:43:56:40:a0:67:d8:ce:d5:15:7e: f8:e8:c2:1d:5f:66:3a:f7:c1:77:cb:e8:7d:73:c8: c5:cb:45:e2:cb:91:8c:13:6c:a5:e7:40:3b:29:b9: 4d:36:10:0c:22:90:06:52:e9:5b:9a:49:43:f2:8b: c6:df:1f:dc:32:51:2b:be:e6:70:6b:2e:5b:c5:39: fc:c8:5b:dc:19:36:c0:01:69:82:a7:80:ec:49:17: cc:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:BB:A8:8D:51:A2:B0:65:AE:15:A8:9A:3E:7D:0D:B9:B9:4B:A1:B5 X509v3 Authority Key Identifier: keyid:F3:B5:64:6B:36:03:79:92:4C:B6:D9:C3:D9:96:69:CE:7F:3B:2C:A2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/87VkazYDeZJMttnD2ZZpzn87LKI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/572ea6-1436-4f26-af57-5975913f52c5/1/87VkazYDeZJMttnD2ZZpzn87LKI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/572ea6-1436-4f26-af57-5975913f52c5/1/87VkazYDeZJMttnD2ZZpzn87LKI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 17:ea:63:57:99:1c:58:7c:49:e6:9e:df:37:db:3b:3c:52:75: e7:e1:ae:c4:21:87:4c:9d:af:cb:85:2d:c9:b3:3d:68:0b:20: 45:68:1d:9f:e0:63:66:79:5a:9d:74:f3:03:cc:da:0e:13:a0: 1f:32:03:4b:92:94:2e:ad:f0:f6:f2:71:f1:23:df:db:66:32: 1a:2e:11:cc:07:70:6c:48:f9:05:b2:13:0d:e9:ba:59:73:2e: 87:0b:5c:21:4b:a2:4c:3f:81:a3:29:7c:23:64:ef:a3:cb:9c: b3:93:57:43:a8:ee:50:77:5f:2e:b2:b6:c8:3e:e7:c6:e8:20: 85:70:c8:8d:4e:fc:8d:2d:d9:09:1a:81:79:06:56:1e:80:41: ad:e4:4e:e8:41:83:30:04:00:f3:d7:7d:a6:fc:a1:b1:29:4b: 37:81:af:e0:e1:1d:b3:1d:d4:5e:9e:ff:d5:4c:a7:88:93:89: c5:07:cb:fc:d6:03:ca:d3:ea:3c:d3:04:5b:25:76:14:2c:d3: 3e:f6:ad:3f:c0:53:97:f3:99:a3:06:64:3f:82:59:39:c8:ca: a9:4f:3d:68:f7:3b:3e:66:3d:aa:ad:93:aa:da:ab:04:26:db: 12:c8:4c:84:75:7b:8a:b6:ee:31:d0:81:06:c6:43:d3:ba:da: 26:37:ad:40 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ3NveZGdtdnnOYaEldai8grMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGYzYjU2NDZiMzYwMzc5OTI0Y2I2ZDljM2Q5OTY2OWNlN2Yz YjJjYTIwHhcNMjYwNDI3MDcwMTA3WhcNMjYwNDI4MDcwMTA3WjAzMTEwLwYDVQQD EyhlY2JiYTg4ZDUxYTJiMDY1YWUxNWE4OWEzZTdkMGRiOWI5NGJhMWI1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAud7suHy0pZfpGmO3oQIgkFmMl6tx se70AOe9epn5ZFoLIOuCWO06FMlc3NceFUfGDGjA6p/ac5n0rZ1mBzXIlDchR4vy XoIH8rDnSuYX2HR6rzf0tXYoggJYw0+K3cuKEUdNF85aK3On1dyvwtcBjFMM+c2G 501plTXGQGOhU2zEJ4qlh15SUuhrwCYsb9K7Z+zqaLVjkvIRxgqktrNwmu7JSvb0 zt2+P0NWQKBn2M7VFX746MIdX2Y698F3y+h9c8jFy0Xiy5GME2yl50A7KblNNhAM IpAGUulbmklD8ovG3x/cMlErvuZway5bxTn8yFvcGTbAAWmCp4DsSRfMzQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOy7qI1RorBlrhWomj59Dbm5S6G1MB8GA1UdIwQY MBaAFPO1ZGs2A3mSTLbZw9mWac5/OyyiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvODdWa2F6WURlWkpNdHRuRDJaWnB6bjg3TEtJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYy81NzJlYTYtMTQzNi00ZjI2LWFmNTct NTk3NTkxM2Y1MmM1LzEvODdWa2F6WURlWkpNdHRuRDJaWnB6bjg3TEtJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hYy81NzJlYTYtMTQzNi00ZjI2LWFmNTctNTk3NTkxM2Y1MmM1 LzEvODdWa2F6WURlWkpNdHRuRDJaWnB6bjg3TEtJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAF+pjV5kc WHxJ5p7fN9s7PFJ15+GuxCGHTJ2vy4UtybM9aAsgRWgdn+BjZnlanXTzA8zaDhOg HzIDS5KULq3w9vJx8SPf22YyGi4RzAdwbEj5BbITDem6WXMuhwtcIUuiTD+Boyl8 I2Tvo8ucs5NXQ6juUHdfLrK2yD7nxugghXDIjU78jS3ZCRqBeQZWHoBBreRO6EGD MAQA89d9pvyhsSlLN4Gv4OEdsx3UXp7/1UyniJOJxQfL/NYDytPqPNMEWyV2FCzT PvatP8BTl/OZowZkP4JZOcjKqU89aPc7PmY9qq2TqtqrBCbbEshMhHV7irbuMdCB BsZD07raJjetQA== -----END CERTIFICATE-----Generated at Mon Apr 27 14:39:47 2026 by rpki-client