$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d0/1e04b8-1031-43f9-9667-8e6f878db5f4/1/71fC2dk6x8-bLxfKp4WbaYWzm50.mft File: 71fC2dk6x8-bLxfKp4WbaYWzm50.mft (raw, json) Hash identifier: uR7icyvRnRXF/Rife5u2Et0jxDuXjpFiYYrO79aqC1s= Subject key identifier: 16:0A:E4:C6:32:97:72:3F:86:69:12:05:BC:62:13:3E:AA:FE:F9:7D Authority key identifier: EF:57:C2:D9:D9:3A:C7:CF:9B:2F:17:CA:A7:85:9B:69:85:B3:9B:9D Certificate issuer: /CN=ef57c2d9d93ac7cf9b2f17caa7859b6985b39b9d Certificate serial: 01A0D4CB8434EBCA194508E4E2732FECBDE7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/71fC2dk6x8-bLxfKp4WbaYWzm50.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/1e04b8-1031-43f9-9667-8e6f878db5f4/1/71fC2dk6x8-bLxfKp4WbaYWzm50.mft Manifest number: 16BC Signing time: Thu 24 Sep 2026 19:01:42 +0000 Manifest this update: Thu 24 Sep 2026 19:01:42 +0000 Manifest next update: Fri 25 Sep 2026 19:01:42 +0000 Files and hashes: 1: 2CUChmUOOT29mGMWY66DWvJh2WQ.roa (hash: zU1VWPSaWCzOeazo96kB3sWhetiBsHBnhrLCkL6ZTdA=) 2: 2ngTJwoTyX1Nz5fKPJKsViXxDHk.roa (hash: Ir7bv4VELFAPGwsqBM/ur+v9Fopro+iM13JltIh4cX4=) 3: 6rWzroD3N7hgAXbNo3yuEEQJsfI.roa (hash: E8YwvFkIVbhynhPsVej9fShdrkMGkyiT775U87D7jFU=) 4: 71fC2dk6x8-bLxfKp4WbaYWzm50.crl (hash: PvuL395dguymxIpql3It1js62n0U1C0ww6p33XXHr28=) 5: 7G49o5z8bi7Lcd53h1h0bVLCJZ4.roa (hash: xDGbGchiaLKjcl8d608rUMISo9V9+y1tYFZNtiJzodk=) 6: DcHyP-EvL5JB0AR6TgnEamGEyXw.roa (hash: 2EXmDj8EeuQdqWCdMyXvAF2OldfFdCBOuc9rEPVXwD8=) 7: OoWh-cPJxIo9-JnYWW14PlGkMmw.roa (hash: cwPQ8D+hZiBjw4HTvZt5RVfnCwIHlW6ts6eZs3ca5ro=) 8: SFT1d23h5s56wOshvucHEdfHMus.roa (hash: VF+VBV1f8xNTi+BzW8c6Ab0X5I99oWpbTy8oGRDDLo4=) 9: UkgHwb4aR-vfEVW_chFXeZM7ufs.roa (hash: EApidgvlTKfdDWwQPs4AF7dQdfTiN6dGaqCve1W5gyA=) 10: WGjiujLOuuOMzeq5qZIClszPW1M.roa (hash: O/EAhkWdzhGmiMAnV0b4Fh9oCWFKJcMW6EgTymaPAQY=) 11: Y6USBv7EsN_hgdgW0uW5KbpmRN4.roa (hash: tv5XftYxR3URBlazOVai0U6SyL0OPoC8TTkoFI5KZuM=) 12: cC6SDRV9V0p2_NMV4sw_ptq5Hlo.roa (hash: jEMYUPIGrPy+Y+xLvCOsQ36XF8oj9iEL636o4Kzme40=) 13: cJiubHQvHYR5Esd1XVcnoAH7nVc.roa (hash: FMFv+8H/z6shQKfY24LWmw315shSovkbNLpCdkTVVts=) 14: fxFIclzOclkDebowO2HCdBIp7JU.roa (hash: kKrwCtFqATS4Q0FX0wGNL2DdvolnBDZchK0yi2jbTGw=) 15: hOLoSAjKi_Ysduv-PJ2ejNql5Ok.roa (hash: lHppC78Yz/GWXK8KxKeoOvZZKZRlVzNZc6B6F5euHEc=) 16: lfuF0jCiq554Dy69uuASsTOPZ58.roa (hash: 6OAF0vEeoAJWYtA3vCDPsWGl38QU6NBLN+OCMZmyOUQ=) 17: xgcIl72OMRsTXzMLl7PIGrHb2sQ.roa (hash: 2SWmpy8UdVqECkthus0V0cF6NslAcNvMaIDq36UHafw=) 18: yJInE-fPhdu-ABKOdKIoShinhzo.roa (hash: skD34yjii/PhcEF3U0syiUJjraUYJpJM6Jt4QrA1zs8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/1e04b8-1031-43f9-9667-8e6f878db5f4/1/71fC2dk6x8-bLxfKp4WbaYWzm50.crl rsync://rpki.ripe.net/repository/DEFAULT/d0/1e04b8-1031-43f9-9667-8e6f878db5f4/1/71fC2dk6x8-bLxfKp4WbaYWzm50.mft rsync://rpki.ripe.net/repository/DEFAULT/71fC2dk6x8-bLxfKp4WbaYWzm50.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 25 Sep 2026 19:01:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a0:d4:cb:84:34:eb:ca:19:45:08:e4:e2:73:2f:ec:bd:e7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ef57c2d9d93ac7cf9b2f17caa7859b6985b39b9d Validity Not Before: Sep 24 19:01:42 2026 GMT Not After : Sep 25 19:01:42 2026 GMT Subject: CN=160ae4c63297723f86691205bc62133eaafef97d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:d7:e4:e4:3c:c9:fa:b8:95:17:5e:4a:bb:57: aa:fe:08:9f:1b:56:20:90:b1:a4:30:ea:92:c3:7b: ac:28:b5:60:15:1c:3c:d6:ef:e7:fc:79:a9:88:83: 82:46:06:82:d4:7c:12:ac:68:5f:03:23:05:09:f1: 1f:ec:1a:0d:a9:7b:44:8b:e8:aa:51:5a:5d:ae:47: bb:c9:ef:21:7f:b5:d5:2d:ed:4b:0c:b5:17:ec:58: 6a:6c:8d:ee:8f:a0:c4:05:06:ca:dc:2d:c2:d0:cd: 4d:8a:ea:14:99:27:cb:26:9d:00:17:86:c0:ac:80: b6:e8:58:be:d0:39:8b:3e:09:db:2b:05:c1:dc:3f: 67:cd:ae:0f:06:59:d5:a3:d8:4f:b9:a0:e2:9f:8c: 89:11:3a:67:d6:2d:bc:c3:70:ca:88:c3:d2:44:d1: 6b:bf:0e:d5:31:95:27:04:82:2b:22:09:da:90:e0: 84:0a:49:97:5a:1f:54:d3:37:ab:6a:19:de:82:99: d3:b5:9a:36:24:f6:1c:3f:87:ab:90:ec:d9:1b:3b: 13:bc:18:c6:e5:52:b0:ef:83:c0:35:65:bd:8d:ee: 7d:3d:1e:c3:f2:dd:5a:a8:97:a3:16:ad:0f:ba:cf: 95:9a:81:54:8b:45:f7:c6:dc:61:31:03:fe:9a:0d: 8e:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:0A:E4:C6:32:97:72:3F:86:69:12:05:BC:62:13:3E:AA:FE:F9:7D X509v3 Authority Key Identifier: keyid:EF:57:C2:D9:D9:3A:C7:CF:9B:2F:17:CA:A7:85:9B:69:85:B3:9B:9D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/71fC2dk6x8-bLxfKp4WbaYWzm50.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/1e04b8-1031-43f9-9667-8e6f878db5f4/1/71fC2dk6x8-bLxfKp4WbaYWzm50.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/1e04b8-1031-43f9-9667-8e6f878db5f4/1/71fC2dk6x8-bLxfKp4WbaYWzm50.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption d3:79:5b:e9:78:36:77:2e:a8:f4:6c:be:2a:2d:bc:08:4b:46: 10:2b:29:e0:f9:76:46:5d:57:73:aa:f8:db:67:8e:16:ee:d3: 17:86:52:90:42:f5:79:4e:94:96:a3:c7:80:ce:7b:7b:57:42: fa:11:67:e5:dc:05:64:b5:5d:e4:c8:d3:02:6e:62:c4:38:f2: c8:df:8e:b5:20:47:ad:a8:0a:0f:d7:ea:2d:45:be:93:ba:fa: 75:88:af:73:cb:af:39:92:f3:34:ad:c0:52:59:2d:c5:e3:d7: 8e:3a:b9:3c:44:bb:86:cd:69:55:38:86:69:29:bc:f7:9d:57: 56:48:2b:11:7b:b8:36:dc:b1:13:b2:5e:04:7a:e5:17:d7:88: 59:61:41:c0:f4:fd:64:cd:10:c5:65:25:0b:1c:4d:b1:89:da: e7:98:d8:e1:05:ed:ae:4a:47:74:5c:26:9f:52:5c:a3:af:8a: 13:b6:5b:7b:80:36:39:a9:c3:3c:88:ba:4e:6b:83:e0:53:3c: f9:10:e4:42:8e:84:1e:2c:35:59:9c:5f:6f:11:4e:89:70:f9: 2c:80:a5:0d:0e:ab:b3:c0:20:5d:ea:44:38:9b:12:4b:e4:07: 5c:e0:55:f3:1b:7c:22:99:69:50:6e:82:fe:d8:2a:b5:8c:ed: 02:7d:72:84 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaDUy4Q068oZRQjk4nMv7L3nMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVmNTdjMmQ5ZDkzYWM3Y2Y5YjJmMTdjYWE3ODU5YjY5ODVi MzliOWQwHhcNMjYwOTI0MTkwMTQyWhcNMjYwOTI1MTkwMTQyWjAzMTEwLwYDVQQD EygxNjBhZTRjNjMyOTc3MjNmODY2OTEyMDViYzYyMTMzZWFhZmVmOTdkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvNfk5DzJ+riVF15Ku1eq/gifG1Yg kLGkMOqSw3usKLVgFRw81u/n/HmpiIOCRgaC1HwSrGhfAyMFCfEf7BoNqXtEi+iq UVpdrke7ye8hf7XVLe1LDLUX7FhqbI3uj6DEBQbK3C3C0M1NiuoUmSfLJp0AF4bA rIC26Fi+0DmLPgnbKwXB3D9nza4PBlnVo9hPuaDin4yJETpn1i28w3DKiMPSRNFr vw7VMZUnBIIrIgnakOCECkmXWh9U0zerahnegpnTtZo2JPYcP4erkOzZGzsTvBjG 5VKw74PANWW9je59PR7D8t1aqJejFq0Pus+VmoFUi0X3xtxhMQP+mg2OsQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBYK5MYyl3I/hmkSBbxiEz6q/vl9MB8GA1UdIwQY MBaAFO9XwtnZOsfPmy8XyqeFm2mFs5udMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNzFmQzJkazZ4OC1iTHhmS3A0V2JhWVd6bTUwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMC8xZTA0YjgtMTAzMS00M2Y5LTk2Njct OGU2Zjg3OGRiNWY0LzEvNzFmQzJkazZ4OC1iTHhmS3A0V2JhWVd6bTUwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMC8xZTA0YjgtMTAzMS00M2Y5LTk2NjctOGU2Zjg3OGRiNWY0 LzEvNzFmQzJkazZ4OC1iTHhmS3A0V2JhWVd6bTUwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA03lb6Xg2 dy6o9Gy+Ki28CEtGECsp4Pl2Rl1Xc6r422eOFu7TF4ZSkEL1eU6UlqPHgM57e1dC +hFn5dwFZLVd5MjTAm5ixDjyyN+OtSBHragKD9fqLUW+k7r6dYivc8uvOZLzNK3A UlktxePXjjq5PES7hs1pVTiGaSm8951XVkgrEXu4NtyxE7JeBHrlF9eIWWFBwPT9 ZM0QxWUlCxxNsYna55jY4QXtrkpHdFwmn1Jco6+KE7Zbe4A2OanDPIi6TmuD4FM8 +RDkQo6EHiw1WZxfbxFOiXD5LIClDQ6rs8AgXepEOJsSS+QHXOBV8xt8IplpUG6C /tgqtYztAn1yhA== -----END CERTIFICATE-----Generated at Fri Sep 25 02:30:07 2026 by rpki-client