$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/1e04b8-1031-43f9-9667-8e6f878db5f4/1/71fC2dk6x8-bLxfKp4WbaYWzm50.mft File: 71fC2dk6x8-bLxfKp4WbaYWzm50.mft (raw, json) Hash identifier: rnQpibyoVPUtuIrOLGYZprVLLHRc1hIsyBsvHmqcfrg= Subject key identifier: F7:EB:D9:03:62:64:68:E8:95:B5:1A:71:90:31:9C:AB:92:F6:DF:26 Authority key identifier: EF:57:C2:D9:D9:3A:C7:CF:9B:2F:17:CA:A7:85:9B:69:85:B3:9B:9D Certificate issuer: /CN=ef57c2d9d93ac7cf9b2f17caa7859b6985b39b9d Certificate serial: 019CC117C51194F5D536117A633DB2D0B045 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/71fC2dk6x8-bLxfKp4WbaYWzm50.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/1e04b8-1031-43f9-9667-8e6f878db5f4/1/71fC2dk6x8-bLxfKp4WbaYWzm50.mft Manifest number: 1499 Signing time: Fri 06 Mar 2026 03:01:26 +0000 Manifest this update: Fri 06 Mar 2026 03:01:26 +0000 Manifest next update: Sat 07 Mar 2026 03:01:26 +0000 Files and hashes: 1: 2ngTJwoTyX1Nz5fKPJKsViXxDHk.roa (hash: Ir7bv4VELFAPGwsqBM/ur+v9Fopro+iM13JltIh4cX4=) 2: 6rWzroD3N7hgAXbNo3yuEEQJsfI.roa (hash: E8YwvFkIVbhynhPsVej9fShdrkMGkyiT775U87D7jFU=) 3: 71fC2dk6x8-bLxfKp4WbaYWzm50.crl (hash: 7k0KX4Ny0qj0zdGAnnCOYYmPq5/NUBHyyApBZGqasOM=) 4: 7G49o5z8bi7Lcd53h1h0bVLCJZ4.roa (hash: xDGbGchiaLKjcl8d608rUMISo9V9+y1tYFZNtiJzodk=) 5: LEPIREdkNINi3YsArD5Iqz6JZKw.roa (hash: u5xGsEDr0cKb/8SFVnNCp/maWigXZl2skRgwHSiizuc=) 6: MhN5MRvvgoofpuFJ5m4YLHyq3Nc.roa (hash: NsITOI3k4qxMk9t6uldTtNFi2z9FnXsMOLB/akZmaQE=) 7: OoWh-cPJxIo9-JnYWW14PlGkMmw.roa (hash: cwPQ8D+hZiBjw4HTvZt5RVfnCwIHlW6ts6eZs3ca5ro=) 8: SFT1d23h5s56wOshvucHEdfHMus.roa (hash: VF+VBV1f8xNTi+BzW8c6Ab0X5I99oWpbTy8oGRDDLo4=) 9: WGjiujLOuuOMzeq5qZIClszPW1M.roa (hash: O/EAhkWdzhGmiMAnV0b4Fh9oCWFKJcMW6EgTymaPAQY=) 10: Y6USBv7EsN_hgdgW0uW5KbpmRN4.roa (hash: tv5XftYxR3URBlazOVai0U6SyL0OPoC8TTkoFI5KZuM=) 11: cJiubHQvHYR5Esd1XVcnoAH7nVc.roa (hash: FMFv+8H/z6shQKfY24LWmw315shSovkbNLpCdkTVVts=) 12: fxFIclzOclkDebowO2HCdBIp7JU.roa (hash: kKrwCtFqATS4Q0FX0wGNL2DdvolnBDZchK0yi2jbTGw=) 13: hOLoSAjKi_Ysduv-PJ2ejNql5Ok.roa (hash: lHppC78Yz/GWXK8KxKeoOvZZKZRlVzNZc6B6F5euHEc=) 14: lQ3OWX0myb8uFOtmBUqCeb2oHhA.roa (hash: bhpFnL+TI2NRedv8XMlX+BIC3gSuHb2XvhJF/GSwAJE=) 15: lfuF0jCiq554Dy69uuASsTOPZ58.roa (hash: 6OAF0vEeoAJWYtA3vCDPsWGl38QU6NBLN+OCMZmyOUQ=) 16: xgcIl72OMRsTXzMLl7PIGrHb2sQ.roa (hash: 2SWmpy8UdVqECkthus0V0cF6NslAcNvMaIDq36UHafw=) 17: yJInE-fPhdu-ABKOdKIoShinhzo.roa (hash: skD34yjii/PhcEF3U0syiUJjraUYJpJM6Jt4QrA1zs8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/1e04b8-1031-43f9-9667-8e6f878db5f4/1/71fC2dk6x8-bLxfKp4WbaYWzm50.crl rsync://rpki.ripe.net/repository/DEFAULT/d0/1e04b8-1031-43f9-9667-8e6f878db5f4/1/71fC2dk6x8-bLxfKp4WbaYWzm50.mft rsync://rpki.ripe.net/repository/DEFAULT/71fC2dk6x8-bLxfKp4WbaYWzm50.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 07 Mar 2026 03:01:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:c1:17:c5:11:94:f5:d5:36:11:7a:63:3d:b2:d0:b0:45 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ef57c2d9d93ac7cf9b2f17caa7859b6985b39b9d Validity Not Before: Mar 6 03:01:26 2026 GMT Not After : Mar 7 03:01:26 2026 GMT Subject: CN=f7ebd903626468e895b51a7190319cab92f6df26 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:78:13:e9:af:11:f2:06:fd:30:8a:6d:95:83: b9:e3:85:e8:7f:21:fe:ac:0d:d0:b2:ef:bc:8a:5f: 71:78:d3:c1:31:19:cd:76:c9:59:2d:86:ea:db:6b: 63:6d:04:0c:f2:0c:4c:7d:f6:4a:b3:9d:e7:6c:6b: a0:b6:59:2f:60:6b:62:9a:7d:04:ba:f1:9b:94:c4: 1b:a6:ac:bd:6a:a3:d2:fd:85:67:c3:ba:fa:e4:b8: 64:b0:ad:60:c9:99:6b:92:fb:b1:cd:88:b0:a8:fb: 0e:9e:bb:50:93:ad:d4:14:eb:d0:f7:46:22:9a:96: 81:77:34:ec:67:6d:d7:b4:fe:fa:8b:04:33:88:ea: 8b:df:38:54:a4:f0:53:55:03:12:c8:9c:f9:dd:e5: 12:2f:3f:11:eb:c3:da:cf:64:9d:33:fd:52:71:9e: d2:55:9c:3a:bf:b3:d4:01:6c:c1:56:98:04:ff:48: 4f:60:cf:07:b8:36:87:cf:e2:b7:e2:be:6b:db:0d: 1c:c5:9a:6d:2d:8c:70:2e:c7:6b:e8:6a:99:a6:85: 77:b9:b9:f9:a1:c4:10:10:21:71:4c:45:63:97:ae: 49:1b:20:38:27:19:dd:f4:38:e6:3b:79:46:03:66: 3a:9f:b1:96:e0:2a:e4:61:89:cd:a1:32:71:22:6d: 10:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F7:EB:D9:03:62:64:68:E8:95:B5:1A:71:90:31:9C:AB:92:F6:DF:26 X509v3 Authority Key Identifier: keyid:EF:57:C2:D9:D9:3A:C7:CF:9B:2F:17:CA:A7:85:9B:69:85:B3:9B:9D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/71fC2dk6x8-bLxfKp4WbaYWzm50.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/1e04b8-1031-43f9-9667-8e6f878db5f4/1/71fC2dk6x8-bLxfKp4WbaYWzm50.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/1e04b8-1031-43f9-9667-8e6f878db5f4/1/71fC2dk6x8-bLxfKp4WbaYWzm50.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c6:9f:79:94:08:27:a8:96:65:84:51:d3:6a:79:41:f8:c4:f6: 8e:f1:a0:b0:28:a8:01:88:af:0d:a7:42:14:e0:9c:7d:0e:1a: aa:61:5a:60:18:da:5a:28:85:6d:67:9e:b5:be:72:e4:af:24: 04:0a:ad:e3:a0:71:ec:32:a4:1e:40:f6:41:c0:8f:f9:66:19: 85:b3:22:d0:4f:1f:17:56:8b:00:e2:32:ae:ac:8e:60:e7:f9: 04:89:51:3a:34:45:0e:26:75:05:02:24:9d:51:15:c8:c9:43: b9:95:70:14:da:da:df:3e:cb:2e:82:76:3d:a7:c3:1e:b6:a9: b1:22:26:c5:b5:0b:29:90:8a:ec:ec:80:14:a8:20:b9:33:ef: cb:e0:1e:e3:f5:b4:2a:8f:49:43:c9:ac:4a:d7:dd:df:e2:1e: e9:d6:16:70:d9:63:33:22:77:d2:97:cf:07:68:b0:ed:f1:f0: b9:54:2b:a8:f5:f7:47:9e:b9:b5:2a:0b:1b:7f:df:90:49:a0: 47:10:6e:59:9d:b9:1d:78:ce:37:ac:24:b9:e5:1b:03:51:7b: 16:c1:ef:0b:31:3d:a0:a1:45:02:d0:58:dc:01:81:f5:de:9e: 2f:76:6a:3d:29:85:d9:c7:50:06:67:8d:4a:a4:de:be:0a:56: 2a:0e:97:7c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZzBF8URlPXVNhF6Yz2y0LBFMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVmNTdjMmQ5ZDkzYWM3Y2Y5YjJmMTdjYWE3ODU5YjY5ODVi MzliOWQwHhcNMjYwMzA2MDMwMTI2WhcNMjYwMzA3MDMwMTI2WjAzMTEwLwYDVQQD EyhmN2ViZDkwMzYyNjQ2OGU4OTViNTFhNzE5MDMxOWNhYjkyZjZkZjI2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxngT6a8R8gb9MIptlYO544XofyH+ rA3Qsu+8il9xeNPBMRnNdslZLYbq22tjbQQM8gxMffZKs53nbGugtlkvYGtimn0E uvGblMQbpqy9aqPS/YVnw7r65LhksK1gyZlrkvuxzYiwqPsOnrtQk63UFOvQ90Yi mpaBdzTsZ23XtP76iwQziOqL3zhUpPBTVQMSyJz53eUSLz8R68Paz2SdM/1ScZ7S VZw6v7PUAWzBVpgE/0hPYM8HuDaHz+K34r5r2w0cxZptLYxwLsdr6GqZpoV3ubn5 ocQQECFxTEVjl65JGyA4Jxnd9DjmO3lGA2Y6n7GW4CrkYYnNoTJxIm0QTwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPfr2QNiZGjolbUacZAxnKuS9t8mMB8GA1UdIwQY MBaAFO9XwtnZOsfPmy8XyqeFm2mFs5udMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNzFmQzJkazZ4OC1iTHhmS3A0V2JhWVd6bTUwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMC8xZTA0YjgtMTAzMS00M2Y5LTk2Njct OGU2Zjg3OGRiNWY0LzEvNzFmQzJkazZ4OC1iTHhmS3A0V2JhWVd6bTUwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMC8xZTA0YjgtMTAzMS00M2Y5LTk2NjctOGU2Zjg3OGRiNWY0 LzEvNzFmQzJkazZ4OC1iTHhmS3A0V2JhWVd6bTUwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAxp95lAgn qJZlhFHTanlB+MT2jvGgsCioAYivDadCFOCcfQ4aqmFaYBjaWiiFbWeetb5y5K8k BAqt46Bx7DKkHkD2QcCP+WYZhbMi0E8fF1aLAOIyrqyOYOf5BIlROjRFDiZ1BQIk nVEVyMlDuZVwFNra3z7LLoJ2PafDHrapsSImxbULKZCK7OyAFKgguTPvy+Ae4/W0 Ko9JQ8msStfd3+Ie6dYWcNljMyJ30pfPB2iw7fHwuVQrqPX3R565tSoLG3/fkEmg RxBuWZ25HXjON6wkueUbA1F7FsHvCzE9oKFFAtBY3AGB9d6eL3ZqPSmF2cdQBmeN SqTevgpWKg6XfA== -----END CERTIFICATE-----Generated at Fri Mar 6 13:38:40 2026 by rpki-client