$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/572ea6-1436-4f26-af57-5975913f52c5/1/87VkazYDeZJMttnD2ZZpzn87LKI.mft File: 87VkazYDeZJMttnD2ZZpzn87LKI.mft (raw, json) Hash identifier: t0Yel5v/meDy+v69l7Fkky/1D6hgIFgY5FxwQGKOOTI= Subject key identifier: E6:3D:44:99:28:45:39:36:66:5C:08:43:96:DA:C6:96:A9:AD:22:9B Authority key identifier: F3:B5:64:6B:36:03:79:92:4C:B6:D9:C3:D9:96:69:CE:7F:3B:2C:A2 Certificate issuer: /CN=f3b5646b360379924cb6d9c3d99669ce7f3b2ca2 Certificate serial: 019D9B875F2D8745B418847A516809F55BEB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/87VkazYDeZJMttnD2ZZpzn87LKI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/572ea6-1436-4f26-af57-5975913f52c5/1/87VkazYDeZJMttnD2ZZpzn87LKI.mft Manifest number: 18CD Signing time: Fri 17 Apr 2026 13:00:33 +0000 Manifest this update: Fri 17 Apr 2026 13:00:33 +0000 Manifest next update: Sat 18 Apr 2026 13:00:33 +0000 Files and hashes: 1: 87VkazYDeZJMttnD2ZZpzn87LKI.crl (hash: qcjQG5eUcG0RsaYuu1sf6hOKuKvRbQ4OP6wwiXDaj2E=) 2: K2pv1joH33JGXTFgdf1GvHFNyOI.roa (hash: ZEpuJAN3j9YTqui19t7uNFdffmnYfLWbwWbEMfD7KU0=) 3: Qa4j2vggkqNGhqUJxufFEhTXf1Q.roa (hash: /qjjWw69vtyAWOv6PADeDd1WN8SkDOm5Fp4obHAorbY=) 4: R7B3oum7BpCTPNvgBRsQX2z2FVg.roa (hash: 1yQXxJ0NPuLrgm3ZJmbrNpelz2efuDlLTtJpmLa5Lyk=) 5: h1UT6NFg3ZpYeiiCgHRBp-1U-NA.roa (hash: Xy3UzarjqLczIZsj3TWwqdDs3SH1huHxF+E73HFRf1M=) 6: o8eX56TS1SQhGzwJAmHIqx0vW0U.roa (hash: DbuFGcW2GBDvibRV74wfir2bnFicP07zDNDVvnpsCHw=) 7: pdyHb8mFNixwJ_XvAUyJS_Ow2g4.roa (hash: OBr/r8tvBWJlq/QSHh/DOJUhlx6WHps7Ga/Udvbou0U=) 8: smEJ6hLs20YbGMTT0hsZU0Olco8.roa (hash: 64a/5YDgJXJtCa0mUs/71cssAkwI0Nj2x00SBWT2qXI=) 9: w0B2Gqbwfzp_NJu2rxJWtvJ41DE.roa (hash: AOaMAW39Y9aDj5YPj7EZWpYQeaBZN2RRoty+ksqKsB0=) 10: z-UevhOt9DbJ3mo4g9NjEb9nzTg.roa (hash: IuS71qLi3haAYiRwxpMdF13P+Vv7zxjdP29UxCKm7CU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/572ea6-1436-4f26-af57-5975913f52c5/1/87VkazYDeZJMttnD2ZZpzn87LKI.crl rsync://rpki.ripe.net/repository/DEFAULT/ac/572ea6-1436-4f26-af57-5975913f52c5/1/87VkazYDeZJMttnD2ZZpzn87LKI.mft rsync://rpki.ripe.net/repository/DEFAULT/87VkazYDeZJMttnD2ZZpzn87LKI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 18 Apr 2026 13:00:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9d:9b:87:5f:2d:87:45:b4:18:84:7a:51:68:09:f5:5b:eb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f3b5646b360379924cb6d9c3d99669ce7f3b2ca2 Validity Not Before: Apr 17 13:00:33 2026 GMT Not After : Apr 18 13:00:33 2026 GMT Subject: CN=e63d449928453936665c084396dac696a9ad229b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:a5:e4:18:54:e7:88:59:83:9b:17:b4:a5:77: 3f:4b:46:4d:cd:89:56:ee:13:cc:66:c3:eb:ce:dc: e9:44:1d:3a:f3:a7:10:02:4f:6f:93:2a:d9:ba:ba: e7:52:42:e7:c6:15:00:0e:5b:d1:e7:4b:42:ae:de: e2:c2:48:bc:fd:ce:33:59:9f:a4:71:2f:d5:d4:70: 8f:ca:d8:68:0c:30:05:be:34:d1:12:32:4b:64:c6: 74:8b:fa:20:fc:64:a0:25:c6:fd:9b:bf:57:aa:1c: 79:db:45:93:68:2f:69:47:2d:7b:86:9d:f8:de:50: 6d:b9:40:a7:9d:6c:71:5d:24:d9:21:b0:ea:e0:1b: cd:d9:95:af:8a:49:e9:f7:c2:e0:e4:39:f3:b8:d2: 86:1f:b4:b8:19:93:7f:b5:48:12:ab:2b:b1:8c:40: f8:b1:a7:de:9e:ef:70:55:c6:52:4f:a5:a4:8e:3f: 2b:e3:e5:a5:e2:07:d6:b5:4b:db:5d:41:2e:3a:e9: df:dd:be:d0:aa:e1:97:7d:e6:26:42:e3:35:d8:20: 79:67:9b:18:6d:f8:1d:18:25:0c:a8:f4:c2:9e:37: 82:9a:f9:dd:61:77:b9:f1:88:66:d2:00:7e:0f:f3: 3c:2e:82:89:04:10:16:53:a0:f6:8b:b7:6a:2e:7e: 5d:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:3D:44:99:28:45:39:36:66:5C:08:43:96:DA:C6:96:A9:AD:22:9B X509v3 Authority Key Identifier: keyid:F3:B5:64:6B:36:03:79:92:4C:B6:D9:C3:D9:96:69:CE:7F:3B:2C:A2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/87VkazYDeZJMttnD2ZZpzn87LKI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/572ea6-1436-4f26-af57-5975913f52c5/1/87VkazYDeZJMttnD2ZZpzn87LKI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/572ea6-1436-4f26-af57-5975913f52c5/1/87VkazYDeZJMttnD2ZZpzn87LKI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 69:97:f5:db:81:dc:57:31:65:86:ce:99:13:80:8f:7b:57:48: dd:b6:ed:ae:b5:7a:bb:d5:46:cb:7f:3c:7e:7a:f5:fc:e8:c6: d8:b7:ef:ae:f4:26:60:99:b0:3f:e8:ee:2a:e4:03:bd:b3:e7: 95:8f:d1:c1:25:38:ad:84:5a:ca:c6:dd:e5:c1:84:37:cf:c7: 1f:d4:39:5e:0b:52:d5:3b:52:88:9c:65:b2:ac:c0:c8:2a:69: bb:b2:9f:53:7e:41:06:03:a9:7c:d8:67:00:07:c1:5c:2f:db: d9:c8:9b:2b:1e:0e:5a:48:74:66:e7:16:ea:e0:a8:aa:58:32: 9a:3c:d4:09:c4:7e:83:7b:de:cd:ad:12:5e:a2:4a:32:1f:7d: 51:12:7e:05:64:57:f7:47:b4:b6:3d:d2:49:02:0c:44:8b:d7: 6a:4e:87:1a:47:e0:41:47:ee:1f:1a:97:94:79:21:c3:79:91: 3b:9e:77:8b:4b:f2:53:55:47:dc:b4:60:71:2a:89:7a:e6:21: f1:8d:83:83:ed:55:eb:14:6d:12:fe:eb:a3:b2:8f:88:87:c2: 7a:cc:f0:3f:94:42:e1:23:11:1a:9b:f4:e2:0c:91:1e:25:eb: 07:1f:a7:44:05:9c:18:e0:60:ff:06:a4:93:97:19:6e:6f:8d: 3a:a3:a8:01 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ2bh18th0W0GIR6UWgJ9VvrMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGYzYjU2NDZiMzYwMzc5OTI0Y2I2ZDljM2Q5OTY2OWNlN2Yz YjJjYTIwHhcNMjYwNDE3MTMwMDMzWhcNMjYwNDE4MTMwMDMzWjAzMTEwLwYDVQQD EyhlNjNkNDQ5OTI4NDUzOTM2NjY1YzA4NDM5NmRhYzY5NmE5YWQyMjliMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1aXkGFTniFmDmxe0pXc/S0ZNzYlW 7hPMZsPrztzpRB0686cQAk9vkyrZurrnUkLnxhUADlvR50tCrt7iwki8/c4zWZ+k cS/V1HCPythoDDAFvjTREjJLZMZ0i/og/GSgJcb9m79Xqhx520WTaC9pRy17hp34 3lBtuUCnnWxxXSTZIbDq4BvN2ZWviknp98Lg5DnzuNKGH7S4GZN/tUgSqyuxjED4 safenu9wVcZST6Wkjj8r4+Wl4gfWtUvbXUEuOunf3b7QquGXfeYmQuM12CB5Z5sY bfgdGCUMqPTCnjeCmvndYXe58Yhm0gB+D/M8LoKJBBAWU6D2i7dqLn5dZQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOY9RJkoRTk2ZlwIQ5baxpaprSKbMB8GA1UdIwQY MBaAFPO1ZGs2A3mSTLbZw9mWac5/OyyiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvODdWa2F6WURlWkpNdHRuRDJaWnB6bjg3TEtJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYy81NzJlYTYtMTQzNi00ZjI2LWFmNTct NTk3NTkxM2Y1MmM1LzEvODdWa2F6WURlWkpNdHRuRDJaWnB6bjg3TEtJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hYy81NzJlYTYtMTQzNi00ZjI2LWFmNTctNTk3NTkxM2Y1MmM1 LzEvODdWa2F6WURlWkpNdHRuRDJaWnB6bjg3TEtJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaZf124Hc VzFlhs6ZE4CPe1dI3bbtrrV6u9VGy388fnr1/OjG2LfvrvQmYJmwP+juKuQDvbPn lY/RwSU4rYRaysbd5cGEN8/HH9Q5XgtS1TtSiJxlsqzAyCppu7KfU35BBgOpfNhn AAfBXC/b2cibKx4OWkh0ZucW6uCoqlgymjzUCcR+g3veza0SXqJKMh99URJ+BWRX 90e0tj3SSQIMRIvXak6HGkfgQUfuHxqXlHkhw3mRO553i0vyU1VH3LRgcSqJeuYh 8Y2Dg+1V6xRtEv7ro7KPiIfCeszwP5RC4SMRGpv04gyRHiXrBx+nRAWcGOBg/wak k5cZbm+NOqOoAQ== -----END CERTIFICATE-----Generated at Fri Apr 17 18:48:48 2026 by rpki-client