$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d0/1e04b8-1031-43f9-9667-8e6f878db5f4/1/71fC2dk6x8-bLxfKp4WbaYWzm50.mft File: 71fC2dk6x8-bLxfKp4WbaYWzm50.mft (raw, json) Hash identifier: k/rqFa7+mBv0OWfcIstDSwcJu1ol+3s2uuuMXqKsdgI= Subject key identifier: 35:0C:3E:39:31:73:BF:D3:C9:CA:01:B2:F2:38:53:A8:66:43:91:0A Authority key identifier: EF:57:C2:D9:D9:3A:C7:CF:9B:2F:17:CA:A7:85:9B:69:85:B3:9B:9D Certificate issuer: /CN=ef57c2d9d93ac7cf9b2f17caa7859b6985b39b9d Certificate serial: 01A0C934EA37288A8A0C99D550754E3F79B9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/71fC2dk6x8-bLxfKp4WbaYWzm50.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/1e04b8-1031-43f9-9667-8e6f878db5f4/1/71fC2dk6x8-bLxfKp4WbaYWzm50.mft Manifest number: 16B6 Signing time: Tue 22 Sep 2026 13:01:23 +0000 Manifest this update: Tue 22 Sep 2026 13:01:23 +0000 Manifest next update: Wed 23 Sep 2026 13:01:23 +0000 Files and hashes: 1: 2CUChmUOOT29mGMWY66DWvJh2WQ.roa (hash: zU1VWPSaWCzOeazo96kB3sWhetiBsHBnhrLCkL6ZTdA=) 2: 2ngTJwoTyX1Nz5fKPJKsViXxDHk.roa (hash: Ir7bv4VELFAPGwsqBM/ur+v9Fopro+iM13JltIh4cX4=) 3: 6rWzroD3N7hgAXbNo3yuEEQJsfI.roa (hash: E8YwvFkIVbhynhPsVej9fShdrkMGkyiT775U87D7jFU=) 4: 71fC2dk6x8-bLxfKp4WbaYWzm50.crl (hash: KonF7/M4pTsHjuM84Qp5ozjj7dzOl6cVLx2Cw8Tae48=) 5: 7G49o5z8bi7Lcd53h1h0bVLCJZ4.roa (hash: xDGbGchiaLKjcl8d608rUMISo9V9+y1tYFZNtiJzodk=) 6: DcHyP-EvL5JB0AR6TgnEamGEyXw.roa (hash: 2EXmDj8EeuQdqWCdMyXvAF2OldfFdCBOuc9rEPVXwD8=) 7: OoWh-cPJxIo9-JnYWW14PlGkMmw.roa (hash: cwPQ8D+hZiBjw4HTvZt5RVfnCwIHlW6ts6eZs3ca5ro=) 8: SFT1d23h5s56wOshvucHEdfHMus.roa (hash: VF+VBV1f8xNTi+BzW8c6Ab0X5I99oWpbTy8oGRDDLo4=) 9: UkgHwb4aR-vfEVW_chFXeZM7ufs.roa (hash: EApidgvlTKfdDWwQPs4AF7dQdfTiN6dGaqCve1W5gyA=) 10: WGjiujLOuuOMzeq5qZIClszPW1M.roa (hash: O/EAhkWdzhGmiMAnV0b4Fh9oCWFKJcMW6EgTymaPAQY=) 11: Y6USBv7EsN_hgdgW0uW5KbpmRN4.roa (hash: tv5XftYxR3URBlazOVai0U6SyL0OPoC8TTkoFI5KZuM=) 12: cC6SDRV9V0p2_NMV4sw_ptq5Hlo.roa (hash: jEMYUPIGrPy+Y+xLvCOsQ36XF8oj9iEL636o4Kzme40=) 13: cJiubHQvHYR5Esd1XVcnoAH7nVc.roa (hash: FMFv+8H/z6shQKfY24LWmw315shSovkbNLpCdkTVVts=) 14: fxFIclzOclkDebowO2HCdBIp7JU.roa (hash: kKrwCtFqATS4Q0FX0wGNL2DdvolnBDZchK0yi2jbTGw=) 15: hOLoSAjKi_Ysduv-PJ2ejNql5Ok.roa (hash: lHppC78Yz/GWXK8KxKeoOvZZKZRlVzNZc6B6F5euHEc=) 16: lfuF0jCiq554Dy69uuASsTOPZ58.roa (hash: 6OAF0vEeoAJWYtA3vCDPsWGl38QU6NBLN+OCMZmyOUQ=) 17: xgcIl72OMRsTXzMLl7PIGrHb2sQ.roa (hash: 2SWmpy8UdVqECkthus0V0cF6NslAcNvMaIDq36UHafw=) 18: yJInE-fPhdu-ABKOdKIoShinhzo.roa (hash: skD34yjii/PhcEF3U0syiUJjraUYJpJM6Jt4QrA1zs8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/1e04b8-1031-43f9-9667-8e6f878db5f4/1/71fC2dk6x8-bLxfKp4WbaYWzm50.crl rsync://rpki.ripe.net/repository/DEFAULT/d0/1e04b8-1031-43f9-9667-8e6f878db5f4/1/71fC2dk6x8-bLxfKp4WbaYWzm50.mft rsync://rpki.ripe.net/repository/DEFAULT/71fC2dk6x8-bLxfKp4WbaYWzm50.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 23 Sep 2026 13:01:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a0:c9:34:ea:37:28:8a:8a:0c:99:d5:50:75:4e:3f:79:b9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ef57c2d9d93ac7cf9b2f17caa7859b6985b39b9d Validity Not Before: Sep 22 13:01:23 2026 GMT Not After : Sep 23 13:01:23 2026 GMT Subject: CN=350c3e393173bfd3c9ca01b2f23853a86643910a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:b6:c0:6d:9f:2c:13:11:06:1b:84:37:6a:6b: 0f:86:a3:d1:02:cd:3f:95:6f:72:48:33:90:75:db: 00:8a:83:f2:c3:b5:50:72:ff:5f:b5:48:9d:78:02: 40:cd:01:5a:c4:cc:53:39:8f:8f:b3:84:9e:c1:89: bb:4f:52:45:12:d4:cd:68:e0:0c:58:f7:56:4a:f3: 3c:4b:96:c0:d9:c2:39:e2:92:80:30:91:d2:ca:88: 8f:9d:93:36:8b:01:d9:04:9b:06:7d:07:69:34:c3: 85:7b:37:85:02:63:b4:c7:7c:e0:c1:8c:ad:4d:55: 1e:8c:e0:17:7e:29:cf:8f:8d:80:76:33:f3:15:76: 5f:89:50:00:2f:3b:07:0f:92:0e:67:03:e3:b0:d2: 3c:e0:50:07:df:d1:24:26:c8:1d:19:e3:3a:79:40: e0:cd:5e:ef:f4:08:8a:57:f3:a6:5a:cd:64:89:49: 81:12:c1:a9:a3:f5:69:52:67:fc:fe:67:c8:c2:06: 91:52:98:b6:00:c9:32:36:f6:e9:1c:f2:1d:66:e4: 27:16:14:cc:67:9a:fb:ac:a4:08:8d:0b:44:20:2d: bb:b0:69:5e:06:66:99:41:f9:ef:89:c9:42:5d:29: e7:83:db:67:25:24:80:80:cb:17:d0:ec:6b:fd:4e: 1c:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:0C:3E:39:31:73:BF:D3:C9:CA:01:B2:F2:38:53:A8:66:43:91:0A X509v3 Authority Key Identifier: keyid:EF:57:C2:D9:D9:3A:C7:CF:9B:2F:17:CA:A7:85:9B:69:85:B3:9B:9D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/71fC2dk6x8-bLxfKp4WbaYWzm50.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/1e04b8-1031-43f9-9667-8e6f878db5f4/1/71fC2dk6x8-bLxfKp4WbaYWzm50.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/1e04b8-1031-43f9-9667-8e6f878db5f4/1/71fC2dk6x8-bLxfKp4WbaYWzm50.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 69:21:31:25:06:6d:78:ea:7d:9d:5b:54:1d:e1:6b:10:75:8d: 42:25:8d:ae:20:37:88:d8:00:de:da:10:be:41:62:de:07:d6: 47:fd:ae:05:ac:7c:67:a7:62:bf:89:80:7b:0a:3e:a5:0c:49: 22:6f:47:1f:d4:8e:e0:c5:b8:08:07:73:ad:da:05:09:72:c7: 56:21:f6:4e:ae:ea:f8:53:76:0e:9a:df:ce:5b:66:20:6d:4e: 78:50:e2:b3:30:0e:62:c2:e8:b4:52:5d:5e:0d:ad:8f:a0:eb: 0f:32:a1:a3:1b:e2:03:3c:eb:2f:77:f4:f6:c4:12:85:86:18: de:cf:bd:df:7b:4e:16:a3:18:f8:72:ff:80:53:28:37:7d:30: 6d:20:24:9c:d2:b2:58:c3:89:9a:3f:57:51:3f:d9:e1:e0:32: f5:78:d5:04:a3:d2:47:bc:f9:86:d8:54:e4:2c:04:b0:e9:c4: 27:bd:32:c7:fa:3b:12:65:51:34:81:bd:3f:e2:c2:7d:6e:6d: 38:37:b8:f9:5b:5b:0c:34:e7:78:75:9a:01:73:3a:77:f4:15: b7:99:e2:d4:e3:43:10:67:ad:ca:84:96:41:cc:f0:38:9b:a6: 70:bb:ac:75:f3:79:3c:b4:a4:b8:1c:55:17:26:80:0d:64:b6: b8:64:8a:a7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaDJNOo3KIqKDJnVUHVOP3m5MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVmNTdjMmQ5ZDkzYWM3Y2Y5YjJmMTdjYWE3ODU5YjY5ODVi MzliOWQwHhcNMjYwOTIyMTMwMTIzWhcNMjYwOTIzMTMwMTIzWjAzMTEwLwYDVQQD EygzNTBjM2UzOTMxNzNiZmQzYzljYTAxYjJmMjM4NTNhODY2NDM5MTBhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkLbAbZ8sExEGG4Q3amsPhqPRAs0/ lW9ySDOQddsAioPyw7VQcv9ftUideAJAzQFaxMxTOY+Ps4SewYm7T1JFEtTNaOAM WPdWSvM8S5bA2cI54pKAMJHSyoiPnZM2iwHZBJsGfQdpNMOFezeFAmO0x3zgwYyt TVUejOAXfinPj42AdjPzFXZfiVAALzsHD5IOZwPjsNI84FAH39EkJsgdGeM6eUDg zV7v9AiKV/OmWs1kiUmBEsGpo/VpUmf8/mfIwgaRUpi2AMkyNvbpHPIdZuQnFhTM Z5r7rKQIjQtEIC27sGleBmaZQfnviclCXSnng9tnJSSAgMsX0Oxr/U4cFQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDUMPjkxc7/TycoBsvI4U6hmQ5EKMB8GA1UdIwQY MBaAFO9XwtnZOsfPmy8XyqeFm2mFs5udMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNzFmQzJkazZ4OC1iTHhmS3A0V2JhWVd6bTUwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMC8xZTA0YjgtMTAzMS00M2Y5LTk2Njct OGU2Zjg3OGRiNWY0LzEvNzFmQzJkazZ4OC1iTHhmS3A0V2JhWVd6bTUwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMC8xZTA0YjgtMTAzMS00M2Y5LTk2NjctOGU2Zjg3OGRiNWY0 LzEvNzFmQzJkazZ4OC1iTHhmS3A0V2JhWVd6bTUwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaSExJQZt eOp9nVtUHeFrEHWNQiWNriA3iNgA3toQvkFi3gfWR/2uBax8Z6div4mAewo+pQxJ Im9HH9SO4MW4CAdzrdoFCXLHViH2Tq7q+FN2DprfzltmIG1OeFDiszAOYsLotFJd Xg2tj6DrDzKhoxviAzzrL3f09sQShYYY3s+933tOFqMY+HL/gFMoN30wbSAknNKy WMOJmj9XUT/Z4eAy9XjVBKPSR7z5hthU5CwEsOnEJ70yx/o7EmVRNIG9P+LCfW5t ODe4+VtbDDTneHWaAXM6d/QVt5ni1ONDEGetyoSWQczwOJumcLusdfN5PLSkuBxV FyaADWS2uGSKpw== -----END CERTIFICATE-----Generated at Tue Sep 22 19:17:56 2026 by rpki-client