$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/58/952230-c262-41cc-b956-cfc46a76ec78/1/N04nKbFzaYkKFRL2Q80I5Lov9BQ.mft File: N04nKbFzaYkKFRL2Q80I5Lov9BQ.mft (raw, json) Hash identifier: xHAxWB8q6tjK9oaD4TJXT0AOTm+qWQNmTBnAwPR5HBY= Subject key identifier: 76:98:CC:47:E7:7C:37:8F:15:58:3C:FB:46:F4:40:4A:43:D1:81:86 Authority key identifier: 37:4E:27:29:B1:73:69:89:0A:15:12:F6:43:CD:08:E4:BA:2F:F4:14 Certificate issuer: /CN=374e2729b17369890a1512f643cd08e4ba2ff414 Certificate serial: 01A12CC54D06C3C0C5E8741E9BDBD19F3B43 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/N04nKbFzaYkKFRL2Q80I5Lov9BQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/952230-c262-41cc-b956-cfc46a76ec78/1/N04nKbFzaYkKFRL2Q80I5Lov9BQ.mft Manifest number: 1320 Signing time: Sun 11 Oct 2026 21:01:30 +0000 Manifest this update: Sun 11 Oct 2026 21:01:30 +0000 Manifest next update: Mon 12 Oct 2026 21:01:30 +0000 Files and hashes: 1: 9L3_BjUt_Pkd4lNYNY4IEdG62Oo.roa (hash: vOAxZY4XkVH9qyzLfhiBzlAaImKBkCi4da5tiiu6/bw=) 2: GNlA9Djc01_DIxMgMXZBVVZA1yU.roa (hash: 7/jOmr8/wXHfFoWsgICU+xbOKLK7NXJAz5aYH9GIqUg=) 3: N04nKbFzaYkKFRL2Q80I5Lov9BQ.crl (hash: GMLIPhq2WGKh4bXKOP+H321gNmRpE6FTdANAlhOUL14=) 4: T6tjope32KekAaANH2cDVM3Bd9k.roa (hash: 9xa2u1KnWt12GiywGNOlfGRCJPP0+ZYG6OMmHhnqVtY=) 5: TdqSn5WT6bBIWHwKcBQStfLEQ8c.roa (hash: TGw0y4tzt3XMgXJsUXMt46Gd2692xH2itYwdSwfZDS4=) 6: UikTrUC-2DsDHw5Izq7A013vsK4.roa (hash: WWeo5jlTxNVbDlt52GNnE81h3OK/EnTtfPjD3xyIbrg=) 7: bxYbt9Cn4R10yajjbMPCKKg_YHc.roa (hash: 8byOzQfwF/KOVbj8pNAWquwbx3xGB2NYpi6Uf3icLsA=) 8: hZiFcW7h5F5XfcXkHDMH450e4sg.roa (hash: D2HtChe92Pq7COg3X4YoKzG61XVo1IcROxs8V7eIHbE=) 9: k-eSrqeXL71w-nhYF8XhonC5sgE.roa (hash: pMZO0gbnwiTypIUzIs1wrF7zpRP+hjOJxinJEWPhOb8=) 10: k1QjV3pgzlwvmbzPzUX7R2KWHvc.roa (hash: wEZygrh3ZXDp7V3oFcFdmkvylWDdJbyp7T5ic216Yzg=) 11: rnlQK5dhYROPwVOz0gIHy2hThyA.roa (hash: ePpSMaFTViP+SRbpfZ7RDlUyIWzyjKKxE4TEHxPptd8=) 12: s0LJxcrA6NEOVotU612Fnf2S5ek.roa (hash: I+fPBNeq55OXeCUKgKO9o96f3LbnL4TA94Ayj0fCu0c=) 13: sdcPQ034WzV8-mwdtcJH6aVjl9c.roa (hash: zgRjTN+TOMTbzC05YvDtYP4QKYhF7SxR32E0NAVGTrk=) 14: uKuuYWmjqM2xupAEXFGSa3h-MaE.roa (hash: FAvKw/d08SYAWcoVLx+8l9dFyUcn/GaKHVNcCMbJaSs=) 15: vL7Zi_26wPMgcv7NcmYQVrG89-Y.roa (hash: rnnb+NddXrEWMTYiz1zv6rkvP1op88gCRHr3DNzUUbI=) 16: vxGSClUEKdIXCUT1_00M4kOwUk0.roa (hash: i237stsz2i1XaEU/WNLhg4As1B9TcbIPHRPFCYv5Hu0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/952230-c262-41cc-b956-cfc46a76ec78/1/N04nKbFzaYkKFRL2Q80I5Lov9BQ.crl rsync://rpki.ripe.net/repository/DEFAULT/58/952230-c262-41cc-b956-cfc46a76ec78/1/N04nKbFzaYkKFRL2Q80I5Lov9BQ.mft rsync://rpki.ripe.net/repository/DEFAULT/N04nKbFzaYkKFRL2Q80I5Lov9BQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 12 Oct 2026 21:01:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a1:2c:c5:4d:06:c3:c0:c5:e8:74:1e:9b:db:d1:9f:3b:43 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=374e2729b17369890a1512f643cd08e4ba2ff414 Validity Not Before: Oct 11 21:01:30 2026 GMT Not After : Oct 12 21:01:30 2026 GMT Subject: CN=7698cc47e77c378f15583cfb46f4404a43d18186 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:03:3d:e6:9c:3e:99:a4:3f:a6:bb:71:3b:3d: fb:a3:79:7f:2c:2b:37:68:15:c9:04:7b:17:25:71: f5:50:72:f3:1e:14:d2:76:24:24:4a:c6:bf:0e:b0: 58:d9:98:20:1b:dd:44:a7:9e:03:c5:b6:3f:32:87: b9:e6:f0:8a:1f:66:0a:d4:cd:a2:23:72:ca:90:0d: 38:60:79:60:ac:39:c2:23:ed:dc:85:60:53:44:e0: 43:00:26:45:55:db:41:91:af:48:1b:e7:77:5d:c6: 4a:d5:8d:57:8f:85:ee:65:2c:56:f5:3a:ae:78:a2: 37:e4:57:7a:80:ef:10:2f:5a:3e:10:64:29:e9:a6: fe:11:b5:0c:36:38:63:99:4a:9c:8d:52:b6:4f:d6: 79:75:5a:9d:ed:da:39:72:db:5a:c4:90:e7:95:ab: c1:1a:26:36:e8:ac:94:5d:d9:6b:63:9d:52:c2:12: 0c:cb:69:0a:51:99:85:25:c1:f9:1e:62:ce:c1:c5: 92:e7:8a:e9:4d:5f:f6:58:b5:1f:75:4b:c5:c6:8a: bd:d6:3c:66:8a:8f:63:e8:0a:e1:11:70:6e:a7:cb: 65:95:73:56:6c:25:27:d8:db:93:65:d1:72:2d:1e: 4c:99:bb:21:65:5b:f0:93:88:49:4c:7c:82:c4:86: f6:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:98:CC:47:E7:7C:37:8F:15:58:3C:FB:46:F4:40:4A:43:D1:81:86 X509v3 Authority Key Identifier: keyid:37:4E:27:29:B1:73:69:89:0A:15:12:F6:43:CD:08:E4:BA:2F:F4:14 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N04nKbFzaYkKFRL2Q80I5Lov9BQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/952230-c262-41cc-b956-cfc46a76ec78/1/N04nKbFzaYkKFRL2Q80I5Lov9BQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/58/952230-c262-41cc-b956-cfc46a76ec78/1/N04nKbFzaYkKFRL2Q80I5Lov9BQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 88:37:34:bf:3a:78:5b:38:f3:2e:3f:80:33:90:87:3b:3b:7e: 69:9c:61:ac:6d:76:86:55:97:30:88:4b:fd:5e:26:51:82:f2: 5e:e1:ee:e9:74:cb:82:62:b4:15:2a:95:58:f4:02:83:f6:b7: c9:ef:f4:24:7a:4e:b0:17:74:27:ac:cb:5f:af:62:6c:79:25: bb:a1:e1:00:5d:cb:d4:08:94:91:ee:82:bb:a3:31:1f:ab:94: b4:6d:f5:69:3b:d1:d4:54:2b:39:fb:35:e2:d8:55:cf:ed:f8: 73:1d:88:83:e7:0c:4f:50:b6:3c:aa:0d:1f:38:1d:4b:5c:4b: b1:a0:ec:f1:40:f2:59:f8:15:a7:3a:cf:35:8d:fa:35:c1:48: 30:ff:19:a0:f5:e2:b5:b5:ed:8b:26:2f:3e:66:5d:b1:0f:c1: 63:f8:6d:10:41:ee:77:5d:d7:3d:60:97:51:bd:8c:bf:7d:de: 31:f1:12:07:cf:a0:db:0a:fa:66:e0:f9:52:05:cd:e2:c2:f8: 99:58:16:a7:ec:5d:b7:19:b1:08:fc:fd:8b:d8:85:09:38:1c: 7b:5d:62:a8:08:06:46:28:fb:15:89:cd:e4:dd:8f:c5:8b:80: 1c:20:a7:1d:c4:ab:bd:ba:d1:5d:43:7b:3e:db:bd:13:6d:82: d7:fd:45:85 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaEsxU0Gw8DF6HQem9vRnztDMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM3NGUyNzI5YjE3MzY5ODkwYTE1MTJmNjQzY2QwOGU0YmEy ZmY0MTQwHhcNMjYxMDExMjEwMTMwWhcNMjYxMDEyMjEwMTMwWjAzMTEwLwYDVQQD Eyg3Njk4Y2M0N2U3N2MzNzhmMTU1ODNjZmI0NmY0NDA0YTQzZDE4MTg2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAowM95pw+maQ/prtxOz37o3l/LCs3 aBXJBHsXJXH1UHLzHhTSdiQkSsa/DrBY2ZggG91Ep54DxbY/Moe55vCKH2YK1M2i I3LKkA04YHlgrDnCI+3chWBTROBDACZFVdtBka9IG+d3XcZK1Y1Xj4XuZSxW9Tqu eKI35Fd6gO8QL1o+EGQp6ab+EbUMNjhjmUqcjVK2T9Z5dVqd7do5cttaxJDnlavB GiY26KyUXdlrY51SwhIMy2kKUZmFJcH5HmLOwcWS54rpTV/2WLUfdUvFxoq91jxm io9j6ArhEXBup8tllXNWbCUn2NuTZdFyLR5MmbshZVvwk4hJTHyCxIb2nQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHaYzEfnfDePFVg8+0b0QEpD0YGGMB8GA1UdIwQY MBaAFDdOJymxc2mJChUS9kPNCOS6L/QUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTjA0bktiRnphWWtLRlJMMlE4MEk1TG92OUJRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OC85NTIyMzAtYzI2Mi00MWNjLWI5NTYt Y2ZjNDZhNzZlYzc4LzEvTjA0bktiRnphWWtLRlJMMlE4MEk1TG92OUJRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81OC85NTIyMzAtYzI2Mi00MWNjLWI5NTYtY2ZjNDZhNzZlYzc4 LzEvTjA0bktiRnphWWtLRlJMMlE4MEk1TG92OUJRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiDc0vzp4 WzjzLj+AM5CHOzt+aZxhrG12hlWXMIhL/V4mUYLyXuHu6XTLgmK0FSqVWPQCg/a3 ye/0JHpOsBd0J6zLX69ibHklu6HhAF3L1AiUke6Cu6MxH6uUtG31aTvR1FQrOfs1 4thVz+34cx2Ig+cMT1C2PKoNHzgdS1xLsaDs8UDyWfgVpzrPNY36NcFIMP8ZoPXi tbXtiyYvPmZdsQ/BY/htEEHud13XPWCXUb2Mv33eMfESB8+g2wr6ZuD5UgXN4sL4 mVgWp+xdtxmxCPz9i9iFCTgce11iqAgGRij7FYnN5N2PxYuAHCCnHcSrvbrRXUN7 Ptu9E22C1/1FhQ== -----END CERTIFICATE-----Generated at Mon Oct 12 04:29:32 2026 by rpki-client