$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d0/1e04b8-1031-43f9-9667-8e6f878db5f4/1/71fC2dk6x8-bLxfKp4WbaYWzm50.mft File: 71fC2dk6x8-bLxfKp4WbaYWzm50.mft (raw, json) Hash identifier: rDBO4ofID6ilCuIhHNWFM40AJOmSJuVboquUeeexGgk= Subject key identifier: 8E:A7:EE:BD:82:36:CB:1E:07:26:18:C8:3F:27:AF:06:68:B3:25:B7 Authority key identifier: EF:57:C2:D9:D9:3A:C7:CF:9B:2F:17:CA:A7:85:9B:69:85:B3:9B:9D Certificate issuer: /CN=ef57c2d9d93ac7cf9b2f17caa7859b6985b39b9d Certificate serial: 01A0D0EE1E943BA1FC40116C0A131B8BFE45 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/71fC2dk6x8-bLxfKp4WbaYWzm50.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/1e04b8-1031-43f9-9667-8e6f878db5f4/1/71fC2dk6x8-bLxfKp4WbaYWzm50.mft Manifest number: 16BA Signing time: Thu 24 Sep 2026 01:01:01 +0000 Manifest this update: Thu 24 Sep 2026 01:01:01 +0000 Manifest next update: Fri 25 Sep 2026 01:01:01 +0000 Files and hashes: 1: 2CUChmUOOT29mGMWY66DWvJh2WQ.roa (hash: zU1VWPSaWCzOeazo96kB3sWhetiBsHBnhrLCkL6ZTdA=) 2: 2ngTJwoTyX1Nz5fKPJKsViXxDHk.roa (hash: Ir7bv4VELFAPGwsqBM/ur+v9Fopro+iM13JltIh4cX4=) 3: 6rWzroD3N7hgAXbNo3yuEEQJsfI.roa (hash: E8YwvFkIVbhynhPsVej9fShdrkMGkyiT775U87D7jFU=) 4: 71fC2dk6x8-bLxfKp4WbaYWzm50.crl (hash: 6e2xSI4UtLK1eyaFndQNP78J0pg1vUYx+6hhNZiQlgk=) 5: 7G49o5z8bi7Lcd53h1h0bVLCJZ4.roa (hash: xDGbGchiaLKjcl8d608rUMISo9V9+y1tYFZNtiJzodk=) 6: DcHyP-EvL5JB0AR6TgnEamGEyXw.roa (hash: 2EXmDj8EeuQdqWCdMyXvAF2OldfFdCBOuc9rEPVXwD8=) 7: OoWh-cPJxIo9-JnYWW14PlGkMmw.roa (hash: cwPQ8D+hZiBjw4HTvZt5RVfnCwIHlW6ts6eZs3ca5ro=) 8: SFT1d23h5s56wOshvucHEdfHMus.roa (hash: VF+VBV1f8xNTi+BzW8c6Ab0X5I99oWpbTy8oGRDDLo4=) 9: UkgHwb4aR-vfEVW_chFXeZM7ufs.roa (hash: EApidgvlTKfdDWwQPs4AF7dQdfTiN6dGaqCve1W5gyA=) 10: WGjiujLOuuOMzeq5qZIClszPW1M.roa (hash: O/EAhkWdzhGmiMAnV0b4Fh9oCWFKJcMW6EgTymaPAQY=) 11: Y6USBv7EsN_hgdgW0uW5KbpmRN4.roa (hash: tv5XftYxR3URBlazOVai0U6SyL0OPoC8TTkoFI5KZuM=) 12: cC6SDRV9V0p2_NMV4sw_ptq5Hlo.roa (hash: jEMYUPIGrPy+Y+xLvCOsQ36XF8oj9iEL636o4Kzme40=) 13: cJiubHQvHYR5Esd1XVcnoAH7nVc.roa (hash: FMFv+8H/z6shQKfY24LWmw315shSovkbNLpCdkTVVts=) 14: fxFIclzOclkDebowO2HCdBIp7JU.roa (hash: kKrwCtFqATS4Q0FX0wGNL2DdvolnBDZchK0yi2jbTGw=) 15: hOLoSAjKi_Ysduv-PJ2ejNql5Ok.roa (hash: lHppC78Yz/GWXK8KxKeoOvZZKZRlVzNZc6B6F5euHEc=) 16: lfuF0jCiq554Dy69uuASsTOPZ58.roa (hash: 6OAF0vEeoAJWYtA3vCDPsWGl38QU6NBLN+OCMZmyOUQ=) 17: xgcIl72OMRsTXzMLl7PIGrHb2sQ.roa (hash: 2SWmpy8UdVqECkthus0V0cF6NslAcNvMaIDq36UHafw=) 18: yJInE-fPhdu-ABKOdKIoShinhzo.roa (hash: skD34yjii/PhcEF3U0syiUJjraUYJpJM6Jt4QrA1zs8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/1e04b8-1031-43f9-9667-8e6f878db5f4/1/71fC2dk6x8-bLxfKp4WbaYWzm50.crl rsync://rpki.ripe.net/repository/DEFAULT/d0/1e04b8-1031-43f9-9667-8e6f878db5f4/1/71fC2dk6x8-bLxfKp4WbaYWzm50.mft rsync://rpki.ripe.net/repository/DEFAULT/71fC2dk6x8-bLxfKp4WbaYWzm50.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 24 Sep 2026 23:00:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a0:d0:ee:1e:94:3b:a1:fc:40:11:6c:0a:13:1b:8b:fe:45 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ef57c2d9d93ac7cf9b2f17caa7859b6985b39b9d Validity Not Before: Sep 24 01:01:01 2026 GMT Not After : Sep 25 01:01:01 2026 GMT Subject: CN=8ea7eebd8236cb1e072618c83f27af0668b325b7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:c3:83:15:4b:db:28:8b:94:87:60:82:74:f4: 3a:21:04:bc:d5:7a:39:aa:e1:f8:5c:80:26:f2:1c: 04:f4:0c:18:a6:9f:a7:a8:81:a5:0a:6a:48:4a:82: f9:8a:2e:a0:6d:af:00:2f:6c:bc:77:db:68:12:17: 26:43:ae:c3:10:15:95:5d:53:99:bf:73:03:cd:a3: 9d:59:57:56:d6:1b:42:93:01:0d:ca:47:4c:ed:cd: 69:31:01:86:26:57:4d:ca:e0:40:66:2b:08:0f:64: a3:e2:a2:15:7a:64:98:64:af:5e:fe:92:4d:6b:b8: b7:91:56:81:f9:b5:9d:af:40:27:99:b3:19:fe:2c: 6f:99:4a:ab:3a:60:a2:a0:7e:2e:0c:6f:e9:ad:85: b5:4f:6e:11:12:12:db:61:36:c5:f3:d5:52:4f:22: 83:a8:61:cd:0f:66:da:31:0c:70:51:cc:37:5e:71: b6:0d:fa:5a:60:c7:d4:41:d4:5b:d1:d0:4d:45:93: 24:2a:de:1e:51:14:e0:5f:d2:3c:38:c8:54:f2:fc: 5e:af:49:51:e8:43:8a:08:e7:96:b0:9a:35:4f:1e: 0b:0d:a9:ba:d8:a0:d0:03:cb:79:96:7b:43:79:f1: 65:7c:a6:2d:35:d7:ae:e4:81:33:f8:b3:76:f3:e1: 5a:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:A7:EE:BD:82:36:CB:1E:07:26:18:C8:3F:27:AF:06:68:B3:25:B7 X509v3 Authority Key Identifier: keyid:EF:57:C2:D9:D9:3A:C7:CF:9B:2F:17:CA:A7:85:9B:69:85:B3:9B:9D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/71fC2dk6x8-bLxfKp4WbaYWzm50.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/1e04b8-1031-43f9-9667-8e6f878db5f4/1/71fC2dk6x8-bLxfKp4WbaYWzm50.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/1e04b8-1031-43f9-9667-8e6f878db5f4/1/71fC2dk6x8-bLxfKp4WbaYWzm50.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6b:78:19:c9:1e:6b:1e:a3:e6:64:de:23:6c:63:8b:23:12:4c: f0:6f:e0:45:89:c8:6c:ef:73:a8:10:b2:cc:89:c0:0e:7d:75: 06:9a:2f:ae:4a:15:22:d4:7e:11:9e:b6:52:a8:f7:69:1f:28: d6:09:d9:42:cc:db:6a:fe:c9:fc:4b:80:c7:53:30:e7:43:3e: 9b:20:86:ae:10:53:42:3e:b8:85:9e:af:5d:c9:bd:f5:2c:58: a4:be:e0:cc:56:45:78:f1:4f:b5:52:c5:34:de:1f:08:23:95: 0c:7c:85:5b:1b:b2:d0:d5:fa:88:18:30:d4:d9:4e:47:d3:b0: 01:91:45:4f:a9:d6:fb:12:cd:61:56:3b:2c:e3:78:21:ac:f1: a1:ab:78:e5:b1:4a:30:08:50:7c:be:ea:9f:3c:fd:97:a3:bc: 4b:52:4d:ae:3c:c2:b2:eb:f4:13:f3:e1:a6:51:7c:3e:5a:7f: fd:b1:d6:f3:3f:35:19:d6:7f:c7:ce:5a:fc:f6:f0:9d:cd:63: b0:af:85:8c:b2:91:ae:ed:66:3d:70:c9:29:2b:64:3b:2f:6e: c8:9d:13:68:47:f8:b2:d9:fc:28:2e:3d:e7:c9:1d:be:b2:ab: 42:b5:ff:6c:d4:5c:4f:c3:17:b1:01:a8:8e:32:81:68:1c:0b: 14:5c:e0:3b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaDQ7h6UO6H8QBFsChMbi/5FMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVmNTdjMmQ5ZDkzYWM3Y2Y5YjJmMTdjYWE3ODU5YjY5ODVi MzliOWQwHhcNMjYwOTI0MDEwMTAxWhcNMjYwOTI1MDEwMTAxWjAzMTEwLwYDVQQD Eyg4ZWE3ZWViZDgyMzZjYjFlMDcyNjE4YzgzZjI3YWYwNjY4YjMyNWI3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7MODFUvbKIuUh2CCdPQ6IQS81Xo5 quH4XIAm8hwE9AwYpp+nqIGlCmpISoL5ii6gba8AL2y8d9toEhcmQ67DEBWVXVOZ v3MDzaOdWVdW1htCkwENykdM7c1pMQGGJldNyuBAZisID2Sj4qIVemSYZK9e/pJN a7i3kVaB+bWdr0AnmbMZ/ixvmUqrOmCioH4uDG/prYW1T24REhLbYTbF89VSTyKD qGHND2baMQxwUcw3XnG2DfpaYMfUQdRb0dBNRZMkKt4eURTgX9I8OMhU8vxer0lR 6EOKCOeWsJo1Tx4LDam62KDQA8t5lntDefFlfKYtNdeu5IEz+LN28+Fa2wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFI6n7r2CNsseByYYyD8nrwZosyW3MB8GA1UdIwQY MBaAFO9XwtnZOsfPmy8XyqeFm2mFs5udMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNzFmQzJkazZ4OC1iTHhmS3A0V2JhWVd6bTUwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMC8xZTA0YjgtMTAzMS00M2Y5LTk2Njct OGU2Zjg3OGRiNWY0LzEvNzFmQzJkazZ4OC1iTHhmS3A0V2JhWVd6bTUwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMC8xZTA0YjgtMTAzMS00M2Y5LTk2NjctOGU2Zjg3OGRiNWY0 LzEvNzFmQzJkazZ4OC1iTHhmS3A0V2JhWVd6bTUwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAa3gZyR5r HqPmZN4jbGOLIxJM8G/gRYnIbO9zqBCyzInADn11BpovrkoVItR+EZ62Uqj3aR8o 1gnZQszbav7J/EuAx1Mw50M+myCGrhBTQj64hZ6vXcm99SxYpL7gzFZFePFPtVLF NN4fCCOVDHyFWxuy0NX6iBgw1NlOR9OwAZFFT6nW+xLNYVY7LON4Iazxoat45bFK MAhQfL7qnzz9l6O8S1JNrjzCsuv0E/PhplF8Plp//bHW8z81GdZ/x85a/Pbwnc1j sK+FjLKRru1mPXDJKStkOy9uyJ0TaEf4stn8KC4958kdvrKrQrX/bNRcT8MXsQGo jjKBaBwLFFzgOw== -----END CERTIFICATE-----Generated at Thu Sep 24 08:55:24 2026 by rpki-client