$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ac/572ea6-1436-4f26-af57-5975913f52c5/1/87VkazYDeZJMttnD2ZZpzn87LKI.mft File: 87VkazYDeZJMttnD2ZZpzn87LKI.mft (raw, json) Hash identifier: aO/3Gd6kozcCKYNcfHcQXOE4H+DnfgMESIVxviSRTXs= Subject key identifier: E0:DB:51:97:06:10:F8:C8:94:D2:77:29:0A:AB:5C:24:60:D4:FE:BF Authority key identifier: F3:B5:64:6B:36:03:79:92:4C:B6:D9:C3:D9:96:69:CE:7F:3B:2C:A2 Certificate issuer: /CN=f3b5646b360379924cb6d9c3d99669ce7f3b2ca2 Certificate serial: 01A0F30CBAE85CE373F509A5615E11BE5D40 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/87VkazYDeZJMttnD2ZZpzn87LKI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/572ea6-1436-4f26-af57-5975913f52c5/1/87VkazYDeZJMttnD2ZZpzn87LKI.mft Manifest number: 1A89 Signing time: Wed 30 Sep 2026 16:01:32 +0000 Manifest this update: Wed 30 Sep 2026 16:01:32 +0000 Manifest next update: Thu 01 Oct 2026 16:01:32 +0000 Files and hashes: 1: 87VkazYDeZJMttnD2ZZpzn87LKI.crl (hash: SGdYCvfjguZlk+c3ywMRsgNRrCqSCcTd6dKst7WvoIg=) 2: K2pv1joH33JGXTFgdf1GvHFNyOI.roa (hash: ZEpuJAN3j9YTqui19t7uNFdffmnYfLWbwWbEMfD7KU0=) 3: Qa4j2vggkqNGhqUJxufFEhTXf1Q.roa (hash: /qjjWw69vtyAWOv6PADeDd1WN8SkDOm5Fp4obHAorbY=) 4: R7B3oum7BpCTPNvgBRsQX2z2FVg.roa (hash: 1yQXxJ0NPuLrgm3ZJmbrNpelz2efuDlLTtJpmLa5Lyk=) 5: frdjE4Wx38p5EUYNv0lgccc2f1Q.roa (hash: JurRqiiO3KqAIZd8NOglvrx6zYK4Dcv5SLr7KkdNG1w=) 6: h1UT6NFg3ZpYeiiCgHRBp-1U-NA.roa (hash: Xy3UzarjqLczIZsj3TWwqdDs3SH1huHxF+E73HFRf1M=) 7: o8eX56TS1SQhGzwJAmHIqx0vW0U.roa (hash: DbuFGcW2GBDvibRV74wfir2bnFicP07zDNDVvnpsCHw=) 8: smEJ6hLs20YbGMTT0hsZU0Olco8.roa (hash: 64a/5YDgJXJtCa0mUs/71cssAkwI0Nj2x00SBWT2qXI=) 9: w0B2Gqbwfzp_NJu2rxJWtvJ41DE.roa (hash: AOaMAW39Y9aDj5YPj7EZWpYQeaBZN2RRoty+ksqKsB0=) 10: z-UevhOt9DbJ3mo4g9NjEb9nzTg.roa (hash: IuS71qLi3haAYiRwxpMdF13P+Vv7zxjdP29UxCKm7CU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/572ea6-1436-4f26-af57-5975913f52c5/1/87VkazYDeZJMttnD2ZZpzn87LKI.crl rsync://rpki.ripe.net/repository/DEFAULT/ac/572ea6-1436-4f26-af57-5975913f52c5/1/87VkazYDeZJMttnD2ZZpzn87LKI.mft rsync://rpki.ripe.net/repository/DEFAULT/87VkazYDeZJMttnD2ZZpzn87LKI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 01 Oct 2026 11:00:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a0:f3:0c:ba:e8:5c:e3:73:f5:09:a5:61:5e:11:be:5d:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f3b5646b360379924cb6d9c3d99669ce7f3b2ca2 Validity Not Before: Sep 30 16:01:32 2026 GMT Not After : Oct 1 16:01:32 2026 GMT Subject: CN=e0db51970610f8c894d277290aab5c2460d4febf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:24:1a:de:ef:4b:c3:e8:8d:00:25:b5:dd:9e: 4b:62:8f:e9:d3:43:ba:d0:86:21:f2:36:f7:56:23: 5a:2f:a6:7a:88:00:4e:c9:4a:20:3a:b6:77:8f:f3: a9:75:1f:a9:5e:dd:52:65:14:3d:63:04:52:bb:d6: 9f:d0:3a:3e:76:39:24:cf:65:59:c9:6f:31:fb:fd: f6:aa:00:c9:9e:bd:cc:cc:fe:de:86:5f:b4:26:09: 8f:2a:0e:2f:8f:41:f5:39:20:de:3b:df:2d:4b:4e: 2c:8e:4e:6b:9b:da:81:a2:88:12:73:ce:a4:47:40: 46:29:96:4b:49:87:f9:33:22:21:05:b3:a7:e1:77: 3e:f6:88:2f:b1:82:b3:14:ed:19:ee:72:6e:4b:65: af:07:6c:3e:12:af:86:35:b4:42:ee:36:76:61:50: ca:ab:9b:be:65:6d:73:ac:cd:2e:e1:63:ff:46:18: 6d:68:12:10:bf:4f:f2:74:75:22:3f:0d:57:f7:a1: a4:39:a1:ac:8c:8f:11:59:f8:86:6b:11:93:9c:2a: 80:50:d1:7b:61:60:4c:e0:3c:d2:13:79:b2:9f:ce: 12:f7:9a:01:9a:d6:da:23:50:63:7a:8f:53:8b:30: 2f:51:2b:18:a8:80:97:b6:dd:0e:83:76:24:1d:fe: 71:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:DB:51:97:06:10:F8:C8:94:D2:77:29:0A:AB:5C:24:60:D4:FE:BF X509v3 Authority Key Identifier: keyid:F3:B5:64:6B:36:03:79:92:4C:B6:D9:C3:D9:96:69:CE:7F:3B:2C:A2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/87VkazYDeZJMttnD2ZZpzn87LKI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/572ea6-1436-4f26-af57-5975913f52c5/1/87VkazYDeZJMttnD2ZZpzn87LKI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/572ea6-1436-4f26-af57-5975913f52c5/1/87VkazYDeZJMttnD2ZZpzn87LKI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 84:60:97:a1:b9:72:96:2c:9d:51:9b:1a:3b:5d:b8:b2:15:23: d0:df:d2:15:67:92:15:0e:6d:63:b0:b6:ae:ab:cc:ff:e1:f8: 8d:e7:c6:7d:40:31:7f:9d:64:50:ae:de:36:ed:da:9e:9a:5d: f7:76:a5:30:66:e1:98:77:2f:be:13:f9:4f:21:91:4c:c4:45: bf:c5:f2:e6:b1:65:fe:7f:58:d9:59:63:41:cf:66:17:11:d3: 57:d0:d8:ca:d9:78:5a:61:9c:72:b3:87:36:bf:62:67:78:f7: 15:b2:61:80:d8:d2:5a:08:2a:85:52:f3:96:f4:fc:64:d0:29: dd:1d:3c:9e:cc:8b:2c:0a:df:67:ee:2c:48:d1:fa:4f:f4:69: 05:2c:4d:53:89:ca:b0:80:50:d7:38:e5:8a:04:85:78:e5:ac: 50:9c:18:77:b7:bd:0b:fe:a1:2e:d8:09:37:a2:f8:c2:a9:78: 63:87:e3:e7:40:58:42:32:3c:e0:b2:9a:83:19:6b:81:7b:b7: af:5f:47:b0:7c:fa:69:fa:57:9e:26:e2:4f:bb:80:a9:15:18: 38:29:41:20:6e:fc:ea:21:d4:eb:93:32:cb:5c:9c:3c:96:a1: 91:9e:b9:7f:93:1e:b8:00:74:e7:d4:77:ea:8a:37:ef:03:de: 57:10:0c:63 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaDzDLroXONz9QmlYV4Rvl1AMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGYzYjU2NDZiMzYwMzc5OTI0Y2I2ZDljM2Q5OTY2OWNlN2Yz YjJjYTIwHhcNMjYwOTMwMTYwMTMyWhcNMjYxMDAxMTYwMTMyWjAzMTEwLwYDVQQD EyhlMGRiNTE5NzA2MTBmOGM4OTRkMjc3MjkwYWFiNWMyNDYwZDRmZWJmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzCQa3u9Lw+iNACW13Z5LYo/p00O6 0IYh8jb3ViNaL6Z6iABOyUogOrZ3j/OpdR+pXt1SZRQ9YwRSu9af0Do+djkkz2VZ yW8x+/32qgDJnr3MzP7ehl+0JgmPKg4vj0H1OSDeO98tS04sjk5rm9qBoogSc86k R0BGKZZLSYf5MyIhBbOn4Xc+9ogvsYKzFO0Z7nJuS2WvB2w+Eq+GNbRC7jZ2YVDK q5u+ZW1zrM0u4WP/RhhtaBIQv0/ydHUiPw1X96GkOaGsjI8RWfiGaxGTnCqAUNF7 YWBM4DzSE3myn84S95oBmtbaI1Bjeo9TizAvUSsYqICXtt0Og3YkHf5xPwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFODbUZcGEPjIlNJ3KQqrXCRg1P6/MB8GA1UdIwQY MBaAFPO1ZGs2A3mSTLbZw9mWac5/OyyiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvODdWa2F6WURlWkpNdHRuRDJaWnB6bjg3TEtJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYy81NzJlYTYtMTQzNi00ZjI2LWFmNTct NTk3NTkxM2Y1MmM1LzEvODdWa2F6WURlWkpNdHRuRDJaWnB6bjg3TEtJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hYy81NzJlYTYtMTQzNi00ZjI2LWFmNTctNTk3NTkxM2Y1MmM1 LzEvODdWa2F6WURlWkpNdHRuRDJaWnB6bjg3TEtJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhGCXobly liydUZsaO124shUj0N/SFWeSFQ5tY7C2rqvM/+H4jefGfUAxf51kUK7eNu3anppd 93alMGbhmHcvvhP5TyGRTMRFv8Xy5rFl/n9Y2VljQc9mFxHTV9DYytl4WmGccrOH Nr9iZ3j3FbJhgNjSWggqhVLzlvT8ZNAp3R08nsyLLArfZ+4sSNH6T/RpBSxNU4nK sIBQ1zjligSFeOWsUJwYd7e9C/6hLtgJN6L4wql4Y4fj50BYQjI84LKagxlrgXu3 r19HsHz6afpXnibiT7uAqRUYOClBIG786iHU65Myy1ycPJahkZ65f5MeuAB059R3 6oo37wPeVxAMYw== -----END CERTIFICATE-----Generated at Wed Sep 30 20:58:07 2026 by rpki-client