$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/952230-c262-41cc-b956-cfc46a76ec78/1/N04nKbFzaYkKFRL2Q80I5Lov9BQ.mft File: N04nKbFzaYkKFRL2Q80I5Lov9BQ.mft (raw, json) Hash identifier: EJ4vIeB7lqk+d2EAYV0HDYWz02g2QOhp4FnRKlnUYu4= Subject key identifier: 34:EA:0F:C2:F4:82:53:91:B9:D4:43:40:FA:1F:65:D8:EF:2C:34:AC Authority key identifier: 37:4E:27:29:B1:73:69:89:0A:15:12:F6:43:CD:08:E4:BA:2F:F4:14 Certificate issuer: /CN=374e2729b17369890a1512f643cd08e4ba2ff414 Certificate serial: 019E653B6753FD2B42D0630C85CF857134D5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/N04nKbFzaYkKFRL2Q80I5Lov9BQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/952230-c262-41cc-b956-cfc46a76ec78/1/N04nKbFzaYkKFRL2Q80I5Lov9BQ.mft Manifest number: 11A8 Signing time: Tue 26 May 2026 17:00:52 +0000 Manifest this update: Tue 26 May 2026 17:00:52 +0000 Manifest next update: Wed 27 May 2026 17:00:52 +0000 Files and hashes: 1: 9L3_BjUt_Pkd4lNYNY4IEdG62Oo.roa (hash: vOAxZY4XkVH9qyzLfhiBzlAaImKBkCi4da5tiiu6/bw=) 2: N04nKbFzaYkKFRL2Q80I5Lov9BQ.crl (hash: MjcK4+beYUSBXG2qcTUYJbnVZqvsNrTyyeLg1E2B6EE=) 3: T6tjope32KekAaANH2cDVM3Bd9k.roa (hash: 9xa2u1KnWt12GiywGNOlfGRCJPP0+ZYG6OMmHhnqVtY=) 4: UikTrUC-2DsDHw5Izq7A013vsK4.roa (hash: WWeo5jlTxNVbDlt52GNnE81h3OK/EnTtfPjD3xyIbrg=) 5: bxYbt9Cn4R10yajjbMPCKKg_YHc.roa (hash: 8byOzQfwF/KOVbj8pNAWquwbx3xGB2NYpi6Uf3icLsA=) 6: hZiFcW7h5F5XfcXkHDMH450e4sg.roa (hash: D2HtChe92Pq7COg3X4YoKzG61XVo1IcROxs8V7eIHbE=) 7: k-eSrqeXL71w-nhYF8XhonC5sgE.roa (hash: pMZO0gbnwiTypIUzIs1wrF7zpRP+hjOJxinJEWPhOb8=) 8: k1QjV3pgzlwvmbzPzUX7R2KWHvc.roa (hash: wEZygrh3ZXDp7V3oFcFdmkvylWDdJbyp7T5ic216Yzg=) 9: nV6x1ARqVoKhDBvVitzUNib3WX8.roa (hash: 4la/SYuIQD/3eli4W4FOUYyY4QVHr6ZjIk4P9pj+v4o=) 10: rnlQK5dhYROPwVOz0gIHy2hThyA.roa (hash: ePpSMaFTViP+SRbpfZ7RDlUyIWzyjKKxE4TEHxPptd8=) 11: s0LJxcrA6NEOVotU612Fnf2S5ek.roa (hash: I+fPBNeq55OXeCUKgKO9o96f3LbnL4TA94Ayj0fCu0c=) 12: sdcPQ034WzV8-mwdtcJH6aVjl9c.roa (hash: zgRjTN+TOMTbzC05YvDtYP4QKYhF7SxR32E0NAVGTrk=) 13: tbcmmXBw3ZIYzwt4SULlG4fEW4c.roa (hash: 1XrkcGJtOYvvhy1+G9sGbL7q4EKrPWSn1X+QN9f+LUQ=) 14: uKuuYWmjqM2xupAEXFGSa3h-MaE.roa (hash: FAvKw/d08SYAWcoVLx+8l9dFyUcn/GaKHVNcCMbJaSs=) 15: vL7Zi_26wPMgcv7NcmYQVrG89-Y.roa (hash: rnnb+NddXrEWMTYiz1zv6rkvP1op88gCRHr3DNzUUbI=) 16: vxGSClUEKdIXCUT1_00M4kOwUk0.roa (hash: i237stsz2i1XaEU/WNLhg4As1B9TcbIPHRPFCYv5Hu0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/952230-c262-41cc-b956-cfc46a76ec78/1/N04nKbFzaYkKFRL2Q80I5Lov9BQ.crl rsync://rpki.ripe.net/repository/DEFAULT/58/952230-c262-41cc-b956-cfc46a76ec78/1/N04nKbFzaYkKFRL2Q80I5Lov9BQ.mft rsync://rpki.ripe.net/repository/DEFAULT/N04nKbFzaYkKFRL2Q80I5Lov9BQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 27 May 2026 17:00:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9e:65:3b:67:53:fd:2b:42:d0:63:0c:85:cf:85:71:34:d5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=374e2729b17369890a1512f643cd08e4ba2ff414 Validity Not Before: May 26 17:00:52 2026 GMT Not After : May 27 17:00:52 2026 GMT Subject: CN=34ea0fc2f4825391b9d44340fa1f65d8ef2c34ac Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:0c:47:89:a7:84:b3:40:9a:3a:71:96:f3:a5: b9:21:08:70:62:cc:18:81:e7:bd:21:c7:0e:cd:a4: ca:52:87:ce:cc:f9:0a:07:d8:05:db:aa:80:07:c3: 60:06:17:9d:27:45:e0:01:23:49:dc:b3:49:e8:27: cd:f4:4c:9c:97:0b:42:ba:e4:61:2a:7e:6b:6d:53: 54:72:fb:3c:e6:9a:ef:1a:25:1c:ca:01:94:fb:5b: f2:a3:0d:f8:66:01:2e:29:f0:7e:91:f6:9c:1f:60: 00:71:f1:42:07:30:0d:3a:7a:e7:72:b6:4d:69:6f: c6:43:25:f9:ed:5e:98:33:7d:93:78:d8:1a:df:de: fd:ec:86:ba:36:c6:51:a8:36:6e:a3:01:27:bf:74: 56:96:de:d3:6a:7f:b7:75:36:e0:8b:ef:46:61:95: a8:f2:ca:a5:d2:35:45:7b:df:f6:77:53:41:12:6d: 39:e9:81:8d:00:f2:49:70:4d:8a:05:db:a8:9b:64: 16:7e:e9:54:e6:96:c0:00:df:26:ac:00:16:fb:ba: a3:31:0e:35:41:55:25:bf:5f:70:f1:fc:0a:4c:44: 47:99:59:78:2e:35:31:00:32:ba:ae:19:5f:b7:1a: 26:87:97:79:7d:64:ae:c0:77:95:66:39:f1:88:bf: f9:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:EA:0F:C2:F4:82:53:91:B9:D4:43:40:FA:1F:65:D8:EF:2C:34:AC X509v3 Authority Key Identifier: keyid:37:4E:27:29:B1:73:69:89:0A:15:12:F6:43:CD:08:E4:BA:2F:F4:14 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N04nKbFzaYkKFRL2Q80I5Lov9BQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/952230-c262-41cc-b956-cfc46a76ec78/1/N04nKbFzaYkKFRL2Q80I5Lov9BQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/58/952230-c262-41cc-b956-cfc46a76ec78/1/N04nKbFzaYkKFRL2Q80I5Lov9BQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b2:f0:68:54:89:91:1a:c5:a7:07:6c:38:c5:3c:2d:db:1b:8b: e3:be:00:1e:e4:31:2e:d0:3a:98:cf:b7:9c:dc:80:bf:bf:d9: ac:9a:1f:c0:ed:07:83:0b:c6:a6:88:2d:8c:e5:6f:17:91:5a: 42:28:0d:8f:6f:62:42:b6:fb:05:64:61:ff:ed:8b:d6:39:33: ff:e3:08:63:56:19:57:ac:c7:c7:bd:a3:61:a3:07:7e:8a:41: a5:97:85:bc:7f:ab:30:ce:db:58:fb:c7:e9:8b:fe:ff:af:34: 04:39:40:b2:50:cd:6d:75:62:53:b9:67:2f:70:c1:8f:6f:05: 0c:5c:20:43:51:3c:be:ec:39:f2:98:76:a0:d4:a6:71:1a:5d: 94:93:9e:d1:c9:62:05:cf:51:90:fa:af:9d:e2:1a:cf:6a:fe: da:50:17:1c:4c:74:bb:77:1f:8d:dd:1c:26:ec:ed:52:6a:38: d7:21:35:c7:1a:13:55:3c:4c:86:25:21:4c:84:41:1f:76:53: 72:ec:3c:85:a6:c4:55:65:e3:a9:af:57:81:29:5b:30:9b:d9: 2f:98:e5:2c:49:40:d2:42:10:c3:52:63:56:94:32:12:28:1c: fb:8f:dc:1f:b6:a7:99:3d:a3:f8:e6:64:0b:2e:d0:ad:5b:91: cd:c0:af:e4 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ5lO2dT/StC0GMMhc+FcTTVMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM3NGUyNzI5YjE3MzY5ODkwYTE1MTJmNjQzY2QwOGU0YmEy ZmY0MTQwHhcNMjYwNTI2MTcwMDUyWhcNMjYwNTI3MTcwMDUyWjAzMTEwLwYDVQQD EygzNGVhMGZjMmY0ODI1MzkxYjlkNDQzNDBmYTFmNjVkOGVmMmMzNGFjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAogxHiaeEs0CaOnGW86W5IQhwYswY gee9IccOzaTKUofOzPkKB9gF26qAB8NgBhedJ0XgASNJ3LNJ6CfN9EyclwtCuuRh Kn5rbVNUcvs85prvGiUcygGU+1vyow34ZgEuKfB+kfacH2AAcfFCBzANOnrncrZN aW/GQyX57V6YM32TeNga39797Ia6NsZRqDZuowEnv3RWlt7Tan+3dTbgi+9GYZWo 8sql0jVFe9/2d1NBEm056YGNAPJJcE2KBduom2QWfulU5pbAAN8mrAAW+7qjMQ41 QVUlv19w8fwKTERHmVl4LjUxADK6rhlftxomh5d5fWSuwHeVZjnxiL/59QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDTqD8L0glORudRDQPofZdjvLDSsMB8GA1UdIwQY MBaAFDdOJymxc2mJChUS9kPNCOS6L/QUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTjA0bktiRnphWWtLRlJMMlE4MEk1TG92OUJRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OC85NTIyMzAtYzI2Mi00MWNjLWI5NTYt Y2ZjNDZhNzZlYzc4LzEvTjA0bktiRnphWWtLRlJMMlE4MEk1TG92OUJRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81OC85NTIyMzAtYzI2Mi00MWNjLWI5NTYtY2ZjNDZhNzZlYzc4 LzEvTjA0bktiRnphWWtLRlJMMlE4MEk1TG92OUJRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAsvBoVImR GsWnB2w4xTwt2xuL474AHuQxLtA6mM+3nNyAv7/ZrJofwO0HgwvGpogtjOVvF5Fa QigNj29iQrb7BWRh/+2L1jkz/+MIY1YZV6zHx72jYaMHfopBpZeFvH+rMM7bWPvH 6Yv+/680BDlAslDNbXViU7lnL3DBj28FDFwgQ1E8vuw58ph2oNSmcRpdlJOe0cli Bc9RkPqvneIaz2r+2lAXHEx0u3cfjd0cJuztUmo41yE1xxoTVTxMhiUhTIRBH3ZT cuw8habEVWXjqa9XgSlbMJvZL5jlLElA0kIQw1JjVpQyEigc+4/cH7anmT2j+OZk Cy7QrVuRzcCv5A== -----END CERTIFICATE-----Generated at Wed May 27 01:49:25 2026 by rpki-client