$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/1e04b8-1031-43f9-9667-8e6f878db5f4/1/71fC2dk6x8-bLxfKp4WbaYWzm50.mft File: 71fC2dk6x8-bLxfKp4WbaYWzm50.mft (raw, json) Hash identifier: AhpwcfEx2TbHuirQbnVRyN/92z6CJ+VD65fb7AFios8= Subject key identifier: 82:CC:6E:A4:3E:5B:81:07:6D:88:2D:9B:78:29:54:31:1A:17:86:0A Authority key identifier: EF:57:C2:D9:D9:3A:C7:CF:9B:2F:17:CA:A7:85:9B:69:85:B3:9B:9D Certificate issuer: /CN=ef57c2d9d93ac7cf9b2f17caa7859b6985b39b9d Certificate serial: 019CAA8FE2FD867FBC8CE06A55C3C017EA5E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/71fC2dk6x8-bLxfKp4WbaYWzm50.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/1e04b8-1031-43f9-9667-8e6f878db5f4/1/71fC2dk6x8-bLxfKp4WbaYWzm50.mft Manifest number: 148D Signing time: Sun 01 Mar 2026 18:01:22 +0000 Manifest this update: Sun 01 Mar 2026 18:01:22 +0000 Manifest next update: Mon 02 Mar 2026 18:01:22 +0000 Files and hashes: 1: 2ngTJwoTyX1Nz5fKPJKsViXxDHk.roa (hash: Ir7bv4VELFAPGwsqBM/ur+v9Fopro+iM13JltIh4cX4=) 2: 50-0mnPvSMOf_DZyORWIrFZAwoQ.roa (hash: S82KBQm1q9p9h9HYYMe6W3qDJxMTCRcG5t6Can7Hy1s=) 3: 6rWzroD3N7hgAXbNo3yuEEQJsfI.roa (hash: E8YwvFkIVbhynhPsVej9fShdrkMGkyiT775U87D7jFU=) 4: 71fC2dk6x8-bLxfKp4WbaYWzm50.crl (hash: 1eMxzzto1XJQ4gSNGQmlQjXt4B6db/5bdzbqHSu/NmA=) 5: 7G49o5z8bi7Lcd53h1h0bVLCJZ4.roa (hash: xDGbGchiaLKjcl8d608rUMISo9V9+y1tYFZNtiJzodk=) 6: LEPIREdkNINi3YsArD5Iqz6JZKw.roa (hash: u5xGsEDr0cKb/8SFVnNCp/maWigXZl2skRgwHSiizuc=) 7: MhN5MRvvgoofpuFJ5m4YLHyq3Nc.roa (hash: NsITOI3k4qxMk9t6uldTtNFi2z9FnXsMOLB/akZmaQE=) 8: OoWh-cPJxIo9-JnYWW14PlGkMmw.roa (hash: cwPQ8D+hZiBjw4HTvZt5RVfnCwIHlW6ts6eZs3ca5ro=) 9: RTGf0BLzlcaCN-tGNAD81Ct7tXU.roa (hash: Csptjtryj/lJTLSNeSXDeRkO5oJRSnAS9MkYcCCBPsU=) 10: SFT1d23h5s56wOshvucHEdfHMus.roa (hash: VF+VBV1f8xNTi+BzW8c6Ab0X5I99oWpbTy8oGRDDLo4=) 11: Y6USBv7EsN_hgdgW0uW5KbpmRN4.roa (hash: tv5XftYxR3URBlazOVai0U6SyL0OPoC8TTkoFI5KZuM=) 12: cJiubHQvHYR5Esd1XVcnoAH7nVc.roa (hash: FMFv+8H/z6shQKfY24LWmw315shSovkbNLpCdkTVVts=) 13: fxFIclzOclkDebowO2HCdBIp7JU.roa (hash: kKrwCtFqATS4Q0FX0wGNL2DdvolnBDZchK0yi2jbTGw=) 14: hOLoSAjKi_Ysduv-PJ2ejNql5Ok.roa (hash: lHppC78Yz/GWXK8KxKeoOvZZKZRlVzNZc6B6F5euHEc=) 15: lQ3OWX0myb8uFOtmBUqCeb2oHhA.roa (hash: bhpFnL+TI2NRedv8XMlX+BIC3gSuHb2XvhJF/GSwAJE=) 16: lfuF0jCiq554Dy69uuASsTOPZ58.roa (hash: 6OAF0vEeoAJWYtA3vCDPsWGl38QU6NBLN+OCMZmyOUQ=) 17: xgcIl72OMRsTXzMLl7PIGrHb2sQ.roa (hash: 2SWmpy8UdVqECkthus0V0cF6NslAcNvMaIDq36UHafw=) 18: yJInE-fPhdu-ABKOdKIoShinhzo.roa (hash: skD34yjii/PhcEF3U0syiUJjraUYJpJM6Jt4QrA1zs8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/1e04b8-1031-43f9-9667-8e6f878db5f4/1/71fC2dk6x8-bLxfKp4WbaYWzm50.crl rsync://rpki.ripe.net/repository/DEFAULT/d0/1e04b8-1031-43f9-9667-8e6f878db5f4/1/71fC2dk6x8-bLxfKp4WbaYWzm50.mft rsync://rpki.ripe.net/repository/DEFAULT/71fC2dk6x8-bLxfKp4WbaYWzm50.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 02 Mar 2026 15:00:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:aa:8f:e2:fd:86:7f:bc:8c:e0:6a:55:c3:c0:17:ea:5e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ef57c2d9d93ac7cf9b2f17caa7859b6985b39b9d Validity Not Before: Mar 1 18:01:22 2026 GMT Not After : Mar 2 18:01:22 2026 GMT Subject: CN=82cc6ea43e5b81076d882d9b782954311a17860a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:d0:70:e4:f1:2c:5a:38:60:5b:61:57:6d:6a: ed:2b:cd:e3:68:5b:13:4f:09:3d:e6:36:0b:77:76: 54:e6:7c:0b:63:b0:7f:19:d0:59:45:c7:31:9f:5f: ec:71:7e:ad:d5:1b:96:2f:0c:c4:6b:e7:d0:c1:e3: 98:71:96:8f:f2:6d:f4:d3:19:54:1e:e7:68:1a:f9: 19:07:f8:66:1a:18:99:3d:59:9d:a5:58:62:12:17: e9:01:5f:d3:63:03:1e:fb:cc:05:d5:c9:46:6a:e4: 78:84:cf:66:9a:4b:56:13:16:04:87:c4:89:84:9c: 3a:ba:f8:cf:b8:b0:5e:05:87:17:91:6e:ca:65:4a: 3f:1f:af:d5:11:38:26:ac:c6:6a:d7:a9:5a:25:da: 53:58:24:a4:9c:5f:d4:2e:da:86:4b:ff:0d:69:e2: 5d:ea:9d:1b:ea:a0:e8:28:3c:2e:fe:ee:cd:91:09: 5d:96:f7:eb:d1:cc:ac:ed:30:25:45:4f:08:52:42: 31:cf:f4:69:2f:0e:f7:f9:e6:76:af:af:20:72:f3: b9:ea:84:b9:a3:cc:2d:c4:e9:89:e2:f9:22:74:37: dc:12:b3:d9:a4:c7:29:a9:cb:f4:11:2f:e8:8a:2b: 7c:40:cd:4d:0f:e6:15:a4:46:3f:c1:87:1a:c2:8b: 94:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:CC:6E:A4:3E:5B:81:07:6D:88:2D:9B:78:29:54:31:1A:17:86:0A X509v3 Authority Key Identifier: keyid:EF:57:C2:D9:D9:3A:C7:CF:9B:2F:17:CA:A7:85:9B:69:85:B3:9B:9D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/71fC2dk6x8-bLxfKp4WbaYWzm50.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/1e04b8-1031-43f9-9667-8e6f878db5f4/1/71fC2dk6x8-bLxfKp4WbaYWzm50.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/1e04b8-1031-43f9-9667-8e6f878db5f4/1/71fC2dk6x8-bLxfKp4WbaYWzm50.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 51:2e:90:82:84:a9:55:50:f4:44:6a:da:67:a2:b1:54:8d:b4: a3:83:d6:af:c3:49:01:6d:8f:0f:3b:cb:1f:80:98:ed:a3:d5: 05:1b:f0:04:f3:f9:2b:53:c0:2c:62:bc:49:dd:9b:ce:72:b3: d4:0e:b1:5a:70:da:84:a0:fb:58:8d:f7:f0:7d:65:aa:50:4b: 04:1e:96:32:f1:6b:77:8f:30:f4:d8:3d:0d:7d:ba:17:d4:df: 6a:db:42:b8:66:68:dc:3d:7d:14:80:8f:ce:39:f4:1f:37:bc: fd:78:b1:7d:bf:f9:44:b0:3c:d1:65:eb:c3:08:d9:c5:05:86: 7a:ed:a4:bd:c5:dd:f8:63:71:07:1a:31:b7:f5:cb:70:d6:b6: 34:e2:b2:8a:22:4e:61:27:e8:44:76:7c:03:4a:58:07:48:6f: 73:17:71:39:c4:5d:7c:56:3a:f5:53:4a:48:59:c4:49:5e:85: 06:8e:c1:48:a9:9f:ad:87:f8:0f:15:79:11:d3:95:fb:b3:be: d8:9e:48:b0:61:c6:d1:41:71:0d:be:03:d1:b2:a7:50:5a:c5: 36:fa:54:bb:cd:ae:b9:ce:a7:8f:3b:cb:f6:ac:ad:f3:d6:ed: 33:4f:d1:bb:72:e0:7b:d3:11:c2:99:b0:e5:61:70:7d:25:fb: 0e:05:ac:84 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZyqj+L9hn+8jOBqVcPAF+peMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVmNTdjMmQ5ZDkzYWM3Y2Y5YjJmMTdjYWE3ODU5YjY5ODVi MzliOWQwHhcNMjYwMzAxMTgwMTIyWhcNMjYwMzAyMTgwMTIyWjAzMTEwLwYDVQQD Eyg4MmNjNmVhNDNlNWI4MTA3NmQ4ODJkOWI3ODI5NTQzMTFhMTc4NjBhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmtBw5PEsWjhgW2FXbWrtK83jaFsT Twk95jYLd3ZU5nwLY7B/GdBZRccxn1/scX6t1RuWLwzEa+fQweOYcZaP8m300xlU HudoGvkZB/hmGhiZPVmdpVhiEhfpAV/TYwMe+8wF1clGauR4hM9mmktWExYEh8SJ hJw6uvjPuLBeBYcXkW7KZUo/H6/VETgmrMZq16laJdpTWCSknF/ULtqGS/8NaeJd 6p0b6qDoKDwu/u7NkQldlvfr0cys7TAlRU8IUkIxz/RpLw73+eZ2r68gcvO56oS5 o8wtxOmJ4vkidDfcErPZpMcpqcv0ES/oiit8QM1ND+YVpEY/wYcawouU5wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFILMbqQ+W4EHbYgtm3gpVDEaF4YKMB8GA1UdIwQY MBaAFO9XwtnZOsfPmy8XyqeFm2mFs5udMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNzFmQzJkazZ4OC1iTHhmS3A0V2JhWVd6bTUwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMC8xZTA0YjgtMTAzMS00M2Y5LTk2Njct OGU2Zjg3OGRiNWY0LzEvNzFmQzJkazZ4OC1iTHhmS3A0V2JhWVd6bTUwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMC8xZTA0YjgtMTAzMS00M2Y5LTk2NjctOGU2Zjg3OGRiNWY0 LzEvNzFmQzJkazZ4OC1iTHhmS3A0V2JhWVd6bTUwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUS6QgoSp VVD0RGraZ6KxVI20o4PWr8NJAW2PDzvLH4CY7aPVBRvwBPP5K1PALGK8Sd2bznKz 1A6xWnDahKD7WI338H1lqlBLBB6WMvFrd48w9Ng9DX26F9TfattCuGZo3D19FICP zjn0Hze8/Xixfb/5RLA80WXrwwjZxQWGeu2kvcXd+GNxBxoxt/XLcNa2NOKyiiJO YSfoRHZ8A0pYB0hvcxdxOcRdfFY69VNKSFnESV6FBo7BSKmfrYf4DxV5EdOV+7O+ 2J5IsGHG0UFxDb4D0bKnUFrFNvpUu82uuc6njzvL9qyt89btM0/Ru3Lge9MRwpmw 5WFwfSX7DgWshA== -----END CERTIFICATE-----Generated at Sun Mar 1 23:58:58 2026 by rpki-client