$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/952230-c262-41cc-b956-cfc46a76ec78/1/N04nKbFzaYkKFRL2Q80I5Lov9BQ.mft File: N04nKbFzaYkKFRL2Q80I5Lov9BQ.mft (raw, json) Hash identifier: 07wK7EYkxltSBnakOAtm3xXfPc6mozdNb0oi9FJQ2yY= Subject key identifier: B8:43:B1:82:1A:33:EA:C6:C1:A3:BF:8E:53:03:5E:71:18:4B:15:A1 Authority key identifier: 37:4E:27:29:B1:73:69:89:0A:15:12:F6:43:CD:08:E4:BA:2F:F4:14 Certificate issuer: /CN=374e2729b17369890a1512f643cd08e4ba2ff414 Certificate serial: 019D71E800ED5BB6738B152F2A20A22DA584 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/N04nKbFzaYkKFRL2Q80I5Lov9BQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/952230-c262-41cc-b956-cfc46a76ec78/1/N04nKbFzaYkKFRL2Q80I5Lov9BQ.mft Manifest number: 112A Signing time: Thu 09 Apr 2026 11:02:03 +0000 Manifest this update: Thu 09 Apr 2026 11:02:03 +0000 Manifest next update: Fri 10 Apr 2026 11:02:03 +0000 Files and hashes: 1: 9L3_BjUt_Pkd4lNYNY4IEdG62Oo.roa (hash: vOAxZY4XkVH9qyzLfhiBzlAaImKBkCi4da5tiiu6/bw=) 2: N04nKbFzaYkKFRL2Q80I5Lov9BQ.crl (hash: 0C1zp9G+QYYoIbS/K1uIJxXbVADaI/XwY4oKympkecw=) 3: T6tjope32KekAaANH2cDVM3Bd9k.roa (hash: 9xa2u1KnWt12GiywGNOlfGRCJPP0+ZYG6OMmHhnqVtY=) 4: UikTrUC-2DsDHw5Izq7A013vsK4.roa (hash: WWeo5jlTxNVbDlt52GNnE81h3OK/EnTtfPjD3xyIbrg=) 5: bxYbt9Cn4R10yajjbMPCKKg_YHc.roa (hash: 8byOzQfwF/KOVbj8pNAWquwbx3xGB2NYpi6Uf3icLsA=) 6: hZiFcW7h5F5XfcXkHDMH450e4sg.roa (hash: D2HtChe92Pq7COg3X4YoKzG61XVo1IcROxs8V7eIHbE=) 7: k-eSrqeXL71w-nhYF8XhonC5sgE.roa (hash: pMZO0gbnwiTypIUzIs1wrF7zpRP+hjOJxinJEWPhOb8=) 8: k1QjV3pgzlwvmbzPzUX7R2KWHvc.roa (hash: wEZygrh3ZXDp7V3oFcFdmkvylWDdJbyp7T5ic216Yzg=) 9: nV6x1ARqVoKhDBvVitzUNib3WX8.roa (hash: 4la/SYuIQD/3eli4W4FOUYyY4QVHr6ZjIk4P9pj+v4o=) 10: rnlQK5dhYROPwVOz0gIHy2hThyA.roa (hash: ePpSMaFTViP+SRbpfZ7RDlUyIWzyjKKxE4TEHxPptd8=) 11: s0LJxcrA6NEOVotU612Fnf2S5ek.roa (hash: I+fPBNeq55OXeCUKgKO9o96f3LbnL4TA94Ayj0fCu0c=) 12: sdcPQ034WzV8-mwdtcJH6aVjl9c.roa (hash: zgRjTN+TOMTbzC05YvDtYP4QKYhF7SxR32E0NAVGTrk=) 13: tbcmmXBw3ZIYzwt4SULlG4fEW4c.roa (hash: 1XrkcGJtOYvvhy1+G9sGbL7q4EKrPWSn1X+QN9f+LUQ=) 14: uKuuYWmjqM2xupAEXFGSa3h-MaE.roa (hash: FAvKw/d08SYAWcoVLx+8l9dFyUcn/GaKHVNcCMbJaSs=) 15: vL7Zi_26wPMgcv7NcmYQVrG89-Y.roa (hash: rnnb+NddXrEWMTYiz1zv6rkvP1op88gCRHr3DNzUUbI=) 16: vxGSClUEKdIXCUT1_00M4kOwUk0.roa (hash: i237stsz2i1XaEU/WNLhg4As1B9TcbIPHRPFCYv5Hu0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/952230-c262-41cc-b956-cfc46a76ec78/1/N04nKbFzaYkKFRL2Q80I5Lov9BQ.crl rsync://rpki.ripe.net/repository/DEFAULT/58/952230-c262-41cc-b956-cfc46a76ec78/1/N04nKbFzaYkKFRL2Q80I5Lov9BQ.mft rsync://rpki.ripe.net/repository/DEFAULT/N04nKbFzaYkKFRL2Q80I5Lov9BQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 10 Apr 2026 11:02:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9d:71:e8:00:ed:5b:b6:73:8b:15:2f:2a:20:a2:2d:a5:84 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=374e2729b17369890a1512f643cd08e4ba2ff414 Validity Not Before: Apr 9 11:02:03 2026 GMT Not After : Apr 10 11:02:03 2026 GMT Subject: CN=b843b1821a33eac6c1a3bf8e53035e71184b15a1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:a3:f3:df:ea:5c:6b:27:e6:47:55:81:e6:46: 3c:16:2a:42:f2:8d:48:36:2a:8b:8d:85:f1:b8:a4: 0a:36:e6:f8:54:95:f9:e7:5f:16:23:ca:19:57:71: 6e:41:2f:b3:8d:e9:84:68:4e:63:44:9d:fe:7b:19: 37:0a:06:90:5f:f4:4f:ff:f3:1d:af:d2:31:9a:73: ef:ca:1c:e6:28:ec:2b:8f:fa:bd:3b:57:c7:2a:b2: d4:67:5f:17:52:78:57:7e:0b:73:93:1b:ff:23:2a: 8b:2e:b5:ce:0c:1d:06:29:f0:24:53:f9:d8:1a:fe: a4:40:04:91:03:39:bd:ff:b1:57:74:c3:8e:73:93: dc:f8:e2:61:60:f1:6c:89:96:ed:ec:59:e6:25:ee: bb:6c:8f:31:71:40:a4:34:ee:84:90:e8:55:f2:8a: 8c:a9:cb:d4:41:b7:2d:fc:78:1b:f3:5a:41:8e:ff: 5c:16:1f:44:32:93:20:28:35:51:f4:cb:44:92:b1: 05:5c:1f:ea:0f:87:a1:4d:5e:e7:5b:c2:75:97:4d: c3:70:04:b2:61:b0:26:a7:e4:03:3a:74:e9:dc:6c: de:8a:de:d8:20:79:63:a2:97:38:46:0a:cd:e0:de: 49:65:83:a9:28:aa:0e:32:ff:ef:66:36:ea:56:dc: 82:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:43:B1:82:1A:33:EA:C6:C1:A3:BF:8E:53:03:5E:71:18:4B:15:A1 X509v3 Authority Key Identifier: keyid:37:4E:27:29:B1:73:69:89:0A:15:12:F6:43:CD:08:E4:BA:2F:F4:14 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N04nKbFzaYkKFRL2Q80I5Lov9BQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/952230-c262-41cc-b956-cfc46a76ec78/1/N04nKbFzaYkKFRL2Q80I5Lov9BQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/58/952230-c262-41cc-b956-cfc46a76ec78/1/N04nKbFzaYkKFRL2Q80I5Lov9BQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 43:78:45:fa:67:69:d4:6b:48:33:e6:33:67:92:b6:bb:7a:e6: 53:cb:ec:09:24:be:5e:0e:ed:4a:71:87:9d:e0:d9:b7:ec:1a: 6c:a2:e0:ca:dc:80:60:9c:69:16:0a:21:0f:08:26:c3:a6:62: 07:31:5d:65:48:b3:e3:08:26:f3:ee:43:0c:c3:2e:8a:87:a2: c7:1e:49:37:67:e2:4a:5e:6d:32:45:93:ea:05:1f:31:d4:78: f1:38:95:30:af:e3:64:6f:e8:f9:7d:93:ea:b9:9d:e6:8e:c3: 44:9c:1f:26:a3:36:b0:b6:f3:e5:70:3b:02:f2:d2:8e:3a:67: ad:9f:be:9b:4d:31:dc:fa:71:8b:67:3a:97:04:c7:70:86:5f: bd:af:86:51:7b:94:df:d8:a0:a0:c3:77:a0:92:09:98:ce:91: be:d1:a1:bd:d7:dc:f2:86:46:03:ea:8a:2c:d2:05:ca:98:90: d4:e5:70:ed:ba:f3:da:6e:93:f8:81:be:84:3b:c2:79:6a:26: 80:2d:ba:cd:91:3e:a5:77:63:cf:38:ac:61:da:cb:b1:c8:9d: 4f:74:44:1c:a2:35:43:c9:e8:18:8b:d2:24:11:50:6f:30:a2: b0:8f:b3:81:08:66:ef:1d:98:3d:36:4e:f9:a8:db:52:42:50: 81:17:0c:21 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ1x6ADtW7ZzixUvKiCiLaWEMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM3NGUyNzI5YjE3MzY5ODkwYTE1MTJmNjQzY2QwOGU0YmEy ZmY0MTQwHhcNMjYwNDA5MTEwMjAzWhcNMjYwNDEwMTEwMjAzWjAzMTEwLwYDVQQD EyhiODQzYjE4MjFhMzNlYWM2YzFhM2JmOGU1MzAzNWU3MTE4NGIxNWExMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiaPz3+pcayfmR1WB5kY8FipC8o1I NiqLjYXxuKQKNub4VJX5518WI8oZV3FuQS+zjemEaE5jRJ3+exk3CgaQX/RP//Md r9IxmnPvyhzmKOwrj/q9O1fHKrLUZ18XUnhXfgtzkxv/IyqLLrXODB0GKfAkU/nY Gv6kQASRAzm9/7FXdMOOc5Pc+OJhYPFsiZbt7FnmJe67bI8xcUCkNO6EkOhV8oqM qcvUQbct/Hgb81pBjv9cFh9EMpMgKDVR9MtEkrEFXB/qD4ehTV7nW8J1l03DcASy YbAmp+QDOnTp3Gzeit7YIHljopc4RgrN4N5JZYOpKKoOMv/vZjbqVtyCewIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLhDsYIaM+rGwaO/jlMDXnEYSxWhMB8GA1UdIwQY MBaAFDdOJymxc2mJChUS9kPNCOS6L/QUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTjA0bktiRnphWWtLRlJMMlE4MEk1TG92OUJRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OC85NTIyMzAtYzI2Mi00MWNjLWI5NTYt Y2ZjNDZhNzZlYzc4LzEvTjA0bktiRnphWWtLRlJMMlE4MEk1TG92OUJRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81OC85NTIyMzAtYzI2Mi00MWNjLWI5NTYtY2ZjNDZhNzZlYzc4 LzEvTjA0bktiRnphWWtLRlJMMlE4MEk1TG92OUJRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQ3hF+mdp 1GtIM+YzZ5K2u3rmU8vsCSS+Xg7tSnGHneDZt+wabKLgytyAYJxpFgohDwgmw6Zi BzFdZUiz4wgm8+5DDMMuioeixx5JN2fiSl5tMkWT6gUfMdR48TiVMK/jZG/o+X2T 6rmd5o7DRJwfJqM2sLbz5XA7AvLSjjpnrZ++m00x3Ppxi2c6lwTHcIZfva+GUXuU 39igoMN3oJIJmM6RvtGhvdfc8oZGA+qKLNIFypiQ1OVw7brz2m6T+IG+hDvCeWom gC26zZE+pXdjzzisYdrLscidT3REHKI1Q8noGIvSJBFQbzCisI+zgQhm7x2YPTZO +ajbUkJQgRcMIQ== -----END CERTIFICATE-----Generated at Thu Apr 9 19:16:52 2026 by rpki-client