$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d0/1e04b8-1031-43f9-9667-8e6f878db5f4/1/71fC2dk6x8-bLxfKp4WbaYWzm50.mft File: 71fC2dk6x8-bLxfKp4WbaYWzm50.mft (raw, json) Hash identifier: MkuxppjXajYVMX9jA+XKt99+RtSs1qqFDYErOxzeQHg= Subject key identifier: 42:42:F2:F3:D4:B2:FA:B3:A4:6F:C6:75:79:82:0B:A7:90:D6:E9:F8 Authority key identifier: EF:57:C2:D9:D9:3A:C7:CF:9B:2F:17:CA:A7:85:9B:69:85:B3:9B:9D Certificate issuer: /CN=ef57c2d9d93ac7cf9b2f17caa7859b6985b39b9d Certificate serial: 01A06C822241CB7C1A780196E336FD0E9364 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/71fC2dk6x8-bLxfKp4WbaYWzm50.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/1e04b8-1031-43f9-9667-8e6f878db5f4/1/71fC2dk6x8-bLxfKp4WbaYWzm50.mft Manifest number: 1686 Signing time: Fri 04 Sep 2026 13:01:02 +0000 Manifest this update: Fri 04 Sep 2026 13:01:02 +0000 Manifest next update: Sat 05 Sep 2026 13:01:02 +0000 Files and hashes: 1: 2CUChmUOOT29mGMWY66DWvJh2WQ.roa (hash: zU1VWPSaWCzOeazo96kB3sWhetiBsHBnhrLCkL6ZTdA=) 2: 2ngTJwoTyX1Nz5fKPJKsViXxDHk.roa (hash: Ir7bv4VELFAPGwsqBM/ur+v9Fopro+iM13JltIh4cX4=) 3: 6rWzroD3N7hgAXbNo3yuEEQJsfI.roa (hash: E8YwvFkIVbhynhPsVej9fShdrkMGkyiT775U87D7jFU=) 4: 71fC2dk6x8-bLxfKp4WbaYWzm50.crl (hash: 3O1RsVhGBcBTXLfDGE5bzeF9fGnilNBNWEGcrfMXd/I=) 5: 7G49o5z8bi7Lcd53h1h0bVLCJZ4.roa (hash: xDGbGchiaLKjcl8d608rUMISo9V9+y1tYFZNtiJzodk=) 6: DcHyP-EvL5JB0AR6TgnEamGEyXw.roa (hash: 2EXmDj8EeuQdqWCdMyXvAF2OldfFdCBOuc9rEPVXwD8=) 7: OoWh-cPJxIo9-JnYWW14PlGkMmw.roa (hash: cwPQ8D+hZiBjw4HTvZt5RVfnCwIHlW6ts6eZs3ca5ro=) 8: SFT1d23h5s56wOshvucHEdfHMus.roa (hash: VF+VBV1f8xNTi+BzW8c6Ab0X5I99oWpbTy8oGRDDLo4=) 9: UkgHwb4aR-vfEVW_chFXeZM7ufs.roa (hash: EApidgvlTKfdDWwQPs4AF7dQdfTiN6dGaqCve1W5gyA=) 10: WGjiujLOuuOMzeq5qZIClszPW1M.roa (hash: O/EAhkWdzhGmiMAnV0b4Fh9oCWFKJcMW6EgTymaPAQY=) 11: Y6USBv7EsN_hgdgW0uW5KbpmRN4.roa (hash: tv5XftYxR3URBlazOVai0U6SyL0OPoC8TTkoFI5KZuM=) 12: cC6SDRV9V0p2_NMV4sw_ptq5Hlo.roa (hash: jEMYUPIGrPy+Y+xLvCOsQ36XF8oj9iEL636o4Kzme40=) 13: cJiubHQvHYR5Esd1XVcnoAH7nVc.roa (hash: FMFv+8H/z6shQKfY24LWmw315shSovkbNLpCdkTVVts=) 14: fxFIclzOclkDebowO2HCdBIp7JU.roa (hash: kKrwCtFqATS4Q0FX0wGNL2DdvolnBDZchK0yi2jbTGw=) 15: hOLoSAjKi_Ysduv-PJ2ejNql5Ok.roa (hash: lHppC78Yz/GWXK8KxKeoOvZZKZRlVzNZc6B6F5euHEc=) 16: lfuF0jCiq554Dy69uuASsTOPZ58.roa (hash: 6OAF0vEeoAJWYtA3vCDPsWGl38QU6NBLN+OCMZmyOUQ=) 17: xgcIl72OMRsTXzMLl7PIGrHb2sQ.roa (hash: 2SWmpy8UdVqECkthus0V0cF6NslAcNvMaIDq36UHafw=) 18: yJInE-fPhdu-ABKOdKIoShinhzo.roa (hash: skD34yjii/PhcEF3U0syiUJjraUYJpJM6Jt4QrA1zs8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/1e04b8-1031-43f9-9667-8e6f878db5f4/1/71fC2dk6x8-bLxfKp4WbaYWzm50.crl rsync://rpki.ripe.net/repository/DEFAULT/d0/1e04b8-1031-43f9-9667-8e6f878db5f4/1/71fC2dk6x8-bLxfKp4WbaYWzm50.mft rsync://rpki.ripe.net/repository/DEFAULT/71fC2dk6x8-bLxfKp4WbaYWzm50.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 05 Sep 2026 13:01:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a0:6c:82:22:41:cb:7c:1a:78:01:96:e3:36:fd:0e:93:64 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ef57c2d9d93ac7cf9b2f17caa7859b6985b39b9d Validity Not Before: Sep 4 13:01:02 2026 GMT Not After : Sep 5 13:01:02 2026 GMT Subject: CN=4242f2f3d4b2fab3a46fc67579820ba790d6e9f8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:71:cb:e8:2f:17:3b:16:98:ab:70:b9:0c:87: 4a:5c:bc:b6:56:fa:5a:28:20:d9:b2:e4:dc:54:19: 62:96:4a:89:f5:c2:41:8e:b9:ea:e2:6b:0f:44:9e: 89:f3:27:94:58:d2:47:eb:12:50:68:02:ac:b6:12: 66:4f:51:0f:87:22:e0:f3:31:c0:31:95:4c:95:84: fa:07:b2:cf:32:2c:45:66:a0:50:d7:93:37:8e:b8: 0c:6c:cb:18:71:7e:08:02:42:0c:7e:8e:ac:3f:11: 9c:3f:59:7b:f8:47:40:7f:e0:d1:39:56:93:45:78: a6:e3:86:2c:31:36:02:4d:54:6f:00:4c:3e:5b:e9: f2:f4:d2:1a:ae:65:c0:71:e3:9b:8b:db:ed:bb:01: 68:ea:2f:eb:43:e4:58:b8:ee:1d:41:fe:5c:7a:21: d9:3c:1c:8e:db:c3:bc:9f:b2:d1:0c:8d:f7:fb:3d: 8d:da:b6:53:66:e7:83:ff:57:87:94:88:6d:c0:90: 52:19:99:5a:a3:9e:a7:99:9e:53:80:d5:8b:80:05: 5e:f6:12:4e:51:b9:9f:6b:2e:6d:6e:f6:17:2a:f2: 89:17:2d:b5:2e:c6:47:5d:84:a2:61:0a:73:6c:92: 36:5c:ad:8f:85:37:82:e7:6a:31:81:60:c1:0a:cb: ff:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:42:F2:F3:D4:B2:FA:B3:A4:6F:C6:75:79:82:0B:A7:90:D6:E9:F8 X509v3 Authority Key Identifier: keyid:EF:57:C2:D9:D9:3A:C7:CF:9B:2F:17:CA:A7:85:9B:69:85:B3:9B:9D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/71fC2dk6x8-bLxfKp4WbaYWzm50.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/1e04b8-1031-43f9-9667-8e6f878db5f4/1/71fC2dk6x8-bLxfKp4WbaYWzm50.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/1e04b8-1031-43f9-9667-8e6f878db5f4/1/71fC2dk6x8-bLxfKp4WbaYWzm50.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a0:8c:b1:2a:10:c3:6d:2e:ba:c7:56:f7:f9:18:86:13:48:32: 7d:82:39:9a:8b:5f:4d:19:eb:da:c3:8b:63:86:cb:6d:ec:4a: a5:60:a5:8f:0a:03:7a:1f:bb:b1:04:05:81:02:5b:bd:a3:e1: c8:b8:0c:a1:6e:63:31:49:b7:32:ca:8e:1a:10:f0:61:c3:73: f1:65:f5:2d:99:43:4c:8c:1c:b2:a2:d2:05:4a:2a:4c:e5:71: 34:a5:c8:83:74:db:35:8b:ae:89:35:5f:65:52:8c:3d:03:69: 5b:4f:f0:d6:ab:21:56:e8:e3:e2:54:f1:33:d8:45:de:0e:0a: 6b:25:cc:9f:3c:1f:35:6f:21:b9:b5:6e:f3:74:81:ad:28:70: 46:31:fb:75:1b:78:9f:c0:eb:5a:93:68:d6:ed:46:40:3d:f0: f9:03:45:e9:75:0e:a2:8e:78:2a:cd:02:34:4b:af:31:fa:88: d2:db:86:6c:02:9f:55:0b:6a:83:41:67:8f:82:d8:c6:73:3a: 3c:2d:74:ac:fc:53:71:bd:d0:94:5b:8e:95:e3:d7:e4:8e:f1: 66:e6:3d:80:91:7b:e9:4b:a7:dc:e2:a6:3f:02:ad:52:51:a5: a8:66:db:4f:ee:5c:a8:29:8a:1d:70:04:f8:da:e9:54:75:11: 71:f3:20:56 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaBsgiJBy3waeAGW4zb9DpNkMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVmNTdjMmQ5ZDkzYWM3Y2Y5YjJmMTdjYWE3ODU5YjY5ODVi MzliOWQwHhcNMjYwOTA0MTMwMTAyWhcNMjYwOTA1MTMwMTAyWjAzMTEwLwYDVQQD Eyg0MjQyZjJmM2Q0YjJmYWIzYTQ2ZmM2NzU3OTgyMGJhNzkwZDZlOWY4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6nHL6C8XOxaYq3C5DIdKXLy2Vvpa KCDZsuTcVBlilkqJ9cJBjrnq4msPRJ6J8yeUWNJH6xJQaAKsthJmT1EPhyLg8zHA MZVMlYT6B7LPMixFZqBQ15M3jrgMbMsYcX4IAkIMfo6sPxGcP1l7+EdAf+DROVaT RXim44YsMTYCTVRvAEw+W+ny9NIarmXAceObi9vtuwFo6i/rQ+RYuO4dQf5ceiHZ PByO28O8n7LRDI33+z2N2rZTZueD/1eHlIhtwJBSGZlao56nmZ5TgNWLgAVe9hJO Ubmfay5tbvYXKvKJFy21LsZHXYSiYQpzbJI2XK2PhTeC52oxgWDBCsv/QQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEJC8vPUsvqzpG/GdXmCC6eQ1un4MB8GA1UdIwQY MBaAFO9XwtnZOsfPmy8XyqeFm2mFs5udMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNzFmQzJkazZ4OC1iTHhmS3A0V2JhWVd6bTUwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMC8xZTA0YjgtMTAzMS00M2Y5LTk2Njct OGU2Zjg3OGRiNWY0LzEvNzFmQzJkazZ4OC1iTHhmS3A0V2JhWVd6bTUwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMC8xZTA0YjgtMTAzMS00M2Y5LTk2NjctOGU2Zjg3OGRiNWY0 LzEvNzFmQzJkazZ4OC1iTHhmS3A0V2JhWVd6bTUwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAoIyxKhDD bS66x1b3+RiGE0gyfYI5motfTRnr2sOLY4bLbexKpWCljwoDeh+7sQQFgQJbvaPh yLgMoW5jMUm3MsqOGhDwYcNz8WX1LZlDTIwcsqLSBUoqTOVxNKXIg3TbNYuuiTVf ZVKMPQNpW0/w1qshVujj4lTxM9hF3g4KayXMnzwfNW8hubVu83SBrShwRjH7dRt4 n8DrWpNo1u1GQD3w+QNF6XUOoo54Ks0CNEuvMfqI0tuGbAKfVQtqg0Fnj4LYxnM6 PC10rPxTcb3QlFuOlePX5I7xZuY9gJF76Uun3OKmPwKtUlGlqGbbT+5cqCmKHXAE +NrpVHURcfMgVg== -----END CERTIFICATE-----Generated at Fri Sep 4 21:55:00 2026 by rpki-client