$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/1e04b8-1031-43f9-9667-8e6f878db5f4/1/71fC2dk6x8-bLxfKp4WbaYWzm50.mft File: 71fC2dk6x8-bLxfKp4WbaYWzm50.mft (raw, json) Hash identifier: J+CNrpQ0bDGMEBpKGfwqKOxP5+kwZJZKvOup8s8u0H8= Subject key identifier: C0:3E:53:8C:55:06:F3:5D:52:92:A4:B7:28:91:36:44:70:A5:0D:58 Authority key identifier: EF:57:C2:D9:D9:3A:C7:CF:9B:2F:17:CA:A7:85:9B:69:85:B3:9B:9D Certificate issuer: /CN=ef57c2d9d93ac7cf9b2f17caa7859b6985b39b9d Certificate serial: 019D999971A08E04E7593AB49C608CDFC087 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/71fC2dk6x8-bLxfKp4WbaYWzm50.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/1e04b8-1031-43f9-9667-8e6f878db5f4/1/71fC2dk6x8-bLxfKp4WbaYWzm50.mft Manifest number: 150A Signing time: Fri 17 Apr 2026 04:01:03 +0000 Manifest this update: Fri 17 Apr 2026 04:01:03 +0000 Manifest next update: Sat 18 Apr 2026 04:01:03 +0000 Files and hashes: 1: 2ngTJwoTyX1Nz5fKPJKsViXxDHk.roa (hash: Ir7bv4VELFAPGwsqBM/ur+v9Fopro+iM13JltIh4cX4=) 2: 6rWzroD3N7hgAXbNo3yuEEQJsfI.roa (hash: E8YwvFkIVbhynhPsVej9fShdrkMGkyiT775U87D7jFU=) 3: 71fC2dk6x8-bLxfKp4WbaYWzm50.crl (hash: 72cfio2e34Y/UomNoFhoZMEaaGSYzajR7DQprJaF324=) 4: 7G49o5z8bi7Lcd53h1h0bVLCJZ4.roa (hash: xDGbGchiaLKjcl8d608rUMISo9V9+y1tYFZNtiJzodk=) 5: LEPIREdkNINi3YsArD5Iqz6JZKw.roa (hash: u5xGsEDr0cKb/8SFVnNCp/maWigXZl2skRgwHSiizuc=) 6: MhN5MRvvgoofpuFJ5m4YLHyq3Nc.roa (hash: NsITOI3k4qxMk9t6uldTtNFi2z9FnXsMOLB/akZmaQE=) 7: OoWh-cPJxIo9-JnYWW14PlGkMmw.roa (hash: cwPQ8D+hZiBjw4HTvZt5RVfnCwIHlW6ts6eZs3ca5ro=) 8: SFT1d23h5s56wOshvucHEdfHMus.roa (hash: VF+VBV1f8xNTi+BzW8c6Ab0X5I99oWpbTy8oGRDDLo4=) 9: WGjiujLOuuOMzeq5qZIClszPW1M.roa (hash: O/EAhkWdzhGmiMAnV0b4Fh9oCWFKJcMW6EgTymaPAQY=) 10: Y6USBv7EsN_hgdgW0uW5KbpmRN4.roa (hash: tv5XftYxR3URBlazOVai0U6SyL0OPoC8TTkoFI5KZuM=) 11: cC6SDRV9V0p2_NMV4sw_ptq5Hlo.roa (hash: jEMYUPIGrPy+Y+xLvCOsQ36XF8oj9iEL636o4Kzme40=) 12: cJiubHQvHYR5Esd1XVcnoAH7nVc.roa (hash: FMFv+8H/z6shQKfY24LWmw315shSovkbNLpCdkTVVts=) 13: fxFIclzOclkDebowO2HCdBIp7JU.roa (hash: kKrwCtFqATS4Q0FX0wGNL2DdvolnBDZchK0yi2jbTGw=) 14: hOLoSAjKi_Ysduv-PJ2ejNql5Ok.roa (hash: lHppC78Yz/GWXK8KxKeoOvZZKZRlVzNZc6B6F5euHEc=) 15: lQ3OWX0myb8uFOtmBUqCeb2oHhA.roa (hash: bhpFnL+TI2NRedv8XMlX+BIC3gSuHb2XvhJF/GSwAJE=) 16: lfuF0jCiq554Dy69uuASsTOPZ58.roa (hash: 6OAF0vEeoAJWYtA3vCDPsWGl38QU6NBLN+OCMZmyOUQ=) 17: xgcIl72OMRsTXzMLl7PIGrHb2sQ.roa (hash: 2SWmpy8UdVqECkthus0V0cF6NslAcNvMaIDq36UHafw=) 18: yJInE-fPhdu-ABKOdKIoShinhzo.roa (hash: skD34yjii/PhcEF3U0syiUJjraUYJpJM6Jt4QrA1zs8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/1e04b8-1031-43f9-9667-8e6f878db5f4/1/71fC2dk6x8-bLxfKp4WbaYWzm50.crl rsync://rpki.ripe.net/repository/DEFAULT/d0/1e04b8-1031-43f9-9667-8e6f878db5f4/1/71fC2dk6x8-bLxfKp4WbaYWzm50.mft rsync://rpki.ripe.net/repository/DEFAULT/71fC2dk6x8-bLxfKp4WbaYWzm50.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 18 Apr 2026 04:01:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9d:99:99:71:a0:8e:04:e7:59:3a:b4:9c:60:8c:df:c0:87 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ef57c2d9d93ac7cf9b2f17caa7859b6985b39b9d Validity Not Before: Apr 17 04:01:03 2026 GMT Not After : Apr 18 04:01:03 2026 GMT Subject: CN=c03e538c5506f35d5292a4b72891364470a50d58 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:3d:09:5c:31:f7:95:e1:cb:82:bd:1e:cd:43: ed:20:99:ae:dc:c1:c8:74:31:09:b9:b3:34:7a:03: cb:d1:d7:a0:1e:7f:b1:4a:75:f6:53:c3:39:22:7c: fa:76:bd:e7:14:f0:ea:04:79:71:36:5a:2d:0b:fe: 13:c3:4b:a4:d1:5e:56:23:3f:cb:a4:63:2b:7b:a2: 6e:b3:70:02:79:76:8c:c7:9d:8c:da:0e:dc:18:0b: c2:66:d7:3c:b3:a2:39:a6:99:6b:af:0f:6f:63:64: 74:47:ac:81:56:8b:18:79:1d:5f:01:87:ee:ab:13: f5:f7:80:a8:21:9c:8f:a1:1e:9d:ef:5a:78:dc:a5: b1:e3:03:ba:4f:6d:d1:52:b5:04:16:c5:03:f4:3e: 03:b3:2d:e9:da:04:fb:7f:62:89:c1:bf:ed:97:2b: 74:23:b2:6d:ea:ad:ee:59:f5:91:16:1c:90:6b:d4: 6b:7a:a4:11:1e:2b:e6:c9:a5:f8:7e:01:f5:14:c0: b7:0c:5e:46:41:35:af:db:7b:e9:19:19:ad:da:30: 41:ea:4e:1c:9e:c0:95:99:4b:04:3a:6d:38:5e:92: ba:bc:5f:7d:fd:f0:36:28:32:26:15:67:96:fe:39: b0:d1:de:1f:81:61:06:3e:ef:49:e4:94:6a:39:2b: 40:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:3E:53:8C:55:06:F3:5D:52:92:A4:B7:28:91:36:44:70:A5:0D:58 X509v3 Authority Key Identifier: keyid:EF:57:C2:D9:D9:3A:C7:CF:9B:2F:17:CA:A7:85:9B:69:85:B3:9B:9D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/71fC2dk6x8-bLxfKp4WbaYWzm50.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/1e04b8-1031-43f9-9667-8e6f878db5f4/1/71fC2dk6x8-bLxfKp4WbaYWzm50.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/1e04b8-1031-43f9-9667-8e6f878db5f4/1/71fC2dk6x8-bLxfKp4WbaYWzm50.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption cd:f2:10:24:d7:1e:8d:9b:65:25:e8:67:34:d3:b0:03:d5:3a: 9c:02:49:21:68:38:f1:13:11:72:a0:48:93:cf:73:2c:6f:b4: 81:d3:d0:f7:37:8a:83:13:7f:6c:1c:a8:ee:60:44:10:5b:06: 59:e5:a1:d6:8d:c5:41:18:57:42:c6:a1:74:6c:e3:e0:ca:eb: 69:32:5e:4e:1f:de:ac:73:35:53:d4:d4:e5:dd:57:f0:c6:26: c7:d6:87:34:c3:dd:68:dd:35:e6:19:c5:fe:f2:33:93:ed:40: d7:1f:44:3e:11:50:79:b9:9c:27:b2:66:9e:36:42:88:cb:6c: fe:92:1d:42:b7:3e:fd:35:f0:c0:0a:a2:92:14:1f:5f:fa:6a: 33:0a:86:30:a5:3b:ca:47:06:de:ab:37:6b:56:4e:f4:0c:99: e7:34:29:01:03:a2:d0:d7:75:82:13:20:17:26:f5:87:71:13: 0f:64:d6:aa:ef:2c:eb:1d:f1:9a:78:89:43:91:56:53:85:5c: 1d:99:66:88:36:2f:dd:a2:90:be:ee:2f:05:f3:6d:3a:88:ac: 9b:45:af:40:67:2f:f6:2f:39:de:c2:df:3f:d4:b2:a5:0e:f9: 3d:fe:6d:68:bc:14:ea:f8:7b:19:18:7d:be:cb:f7:b0:50:54: 82:05:e8:df -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ2ZmXGgjgTnWTq0nGCM38CHMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVmNTdjMmQ5ZDkzYWM3Y2Y5YjJmMTdjYWE3ODU5YjY5ODVi MzliOWQwHhcNMjYwNDE3MDQwMTAzWhcNMjYwNDE4MDQwMTAzWjAzMTEwLwYDVQQD EyhjMDNlNTM4YzU1MDZmMzVkNTI5MmE0YjcyODkxMzY0NDcwYTUwZDU4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxD0JXDH3leHLgr0ezUPtIJmu3MHI dDEJubM0egPL0degHn+xSnX2U8M5Inz6dr3nFPDqBHlxNlotC/4Tw0uk0V5WIz/L pGMre6Jus3ACeXaMx52M2g7cGAvCZtc8s6I5pplrrw9vY2R0R6yBVosYeR1fAYfu qxP194CoIZyPoR6d71p43KWx4wO6T23RUrUEFsUD9D4Dsy3p2gT7f2KJwb/tlyt0 I7Jt6q3uWfWRFhyQa9RreqQRHivmyaX4fgH1FMC3DF5GQTWv23vpGRmt2jBB6k4c nsCVmUsEOm04XpK6vF99/fA2KDImFWeW/jmw0d4fgWEGPu9J5JRqOStAHwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMA+U4xVBvNdUpKktyiRNkRwpQ1YMB8GA1UdIwQY MBaAFO9XwtnZOsfPmy8XyqeFm2mFs5udMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNzFmQzJkazZ4OC1iTHhmS3A0V2JhWVd6bTUwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMC8xZTA0YjgtMTAzMS00M2Y5LTk2Njct OGU2Zjg3OGRiNWY0LzEvNzFmQzJkazZ4OC1iTHhmS3A0V2JhWVd6bTUwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMC8xZTA0YjgtMTAzMS00M2Y5LTk2NjctOGU2Zjg3OGRiNWY0 LzEvNzFmQzJkazZ4OC1iTHhmS3A0V2JhWVd6bTUwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAzfIQJNce jZtlJehnNNOwA9U6nAJJIWg48RMRcqBIk89zLG+0gdPQ9zeKgxN/bByo7mBEEFsG WeWh1o3FQRhXQsahdGzj4MrraTJeTh/erHM1U9TU5d1X8MYmx9aHNMPdaN015hnF /vIzk+1A1x9EPhFQebmcJ7JmnjZCiMts/pIdQrc+/TXwwAqikhQfX/pqMwqGMKU7 ykcG3qs3a1ZO9AyZ5zQpAQOi0Nd1ghMgFyb1h3ETD2TWqu8s6x3xmniJQ5FWU4Vc HZlmiDYv3aKQvu4vBfNtOoism0WvQGcv9i853sLfP9SypQ75Pf5taLwU6vh7GRh9 vsv3sFBUggXo3w== -----END CERTIFICATE-----Generated at Fri Apr 17 13:56:33 2026 by rpki-client