$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/952230-c262-41cc-b956-cfc46a76ec78/1/N04nKbFzaYkKFRL2Q80I5Lov9BQ.mft File: N04nKbFzaYkKFRL2Q80I5Lov9BQ.mft (raw, json) Hash identifier: WxH38NPDrM57kd+sxfi4Dah1MeUTEhzy10CQmLDCHGg= Subject key identifier: CC:34:13:94:96:B8:CD:AB:09:8D:4F:DF:4B:BD:F4:57:FC:6D:75:2F Authority key identifier: 37:4E:27:29:B1:73:69:89:0A:15:12:F6:43:CD:08:E4:BA:2F:F4:14 Certificate issuer: /CN=374e2729b17369890a1512f643cd08e4ba2ff414 Certificate serial: 019C8A288B8468544396B3E8E994D918FA5E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/N04nKbFzaYkKFRL2Q80I5Lov9BQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/952230-c262-41cc-b956-cfc46a76ec78/1/N04nKbFzaYkKFRL2Q80I5Lov9BQ.mft Manifest number: 10B2 Signing time: Mon 23 Feb 2026 11:00:38 +0000 Manifest this update: Mon 23 Feb 2026 11:00:38 +0000 Manifest next update: Tue 24 Feb 2026 11:00:38 +0000 Files and hashes: 1: 9L3_BjUt_Pkd4lNYNY4IEdG62Oo.roa (hash: vOAxZY4XkVH9qyzLfhiBzlAaImKBkCi4da5tiiu6/bw=) 2: N04nKbFzaYkKFRL2Q80I5Lov9BQ.crl (hash: DE0yrtpavc3Px3aL4kKUQJMSmcA4Av0cs+o/2lx6+EY=) 3: T6tjope32KekAaANH2cDVM3Bd9k.roa (hash: 9xa2u1KnWt12GiywGNOlfGRCJPP0+ZYG6OMmHhnqVtY=) 4: UikTrUC-2DsDHw5Izq7A013vsK4.roa (hash: WWeo5jlTxNVbDlt52GNnE81h3OK/EnTtfPjD3xyIbrg=) 5: bxYbt9Cn4R10yajjbMPCKKg_YHc.roa (hash: 8byOzQfwF/KOVbj8pNAWquwbx3xGB2NYpi6Uf3icLsA=) 6: hZiFcW7h5F5XfcXkHDMH450e4sg.roa (hash: D2HtChe92Pq7COg3X4YoKzG61XVo1IcROxs8V7eIHbE=) 7: k-eSrqeXL71w-nhYF8XhonC5sgE.roa (hash: pMZO0gbnwiTypIUzIs1wrF7zpRP+hjOJxinJEWPhOb8=) 8: k1QjV3pgzlwvmbzPzUX7R2KWHvc.roa (hash: wEZygrh3ZXDp7V3oFcFdmkvylWDdJbyp7T5ic216Yzg=) 9: nV6x1ARqVoKhDBvVitzUNib3WX8.roa (hash: 4la/SYuIQD/3eli4W4FOUYyY4QVHr6ZjIk4P9pj+v4o=) 10: rnlQK5dhYROPwVOz0gIHy2hThyA.roa (hash: ePpSMaFTViP+SRbpfZ7RDlUyIWzyjKKxE4TEHxPptd8=) 11: s0LJxcrA6NEOVotU612Fnf2S5ek.roa (hash: I+fPBNeq55OXeCUKgKO9o96f3LbnL4TA94Ayj0fCu0c=) 12: sdcPQ034WzV8-mwdtcJH6aVjl9c.roa (hash: zgRjTN+TOMTbzC05YvDtYP4QKYhF7SxR32E0NAVGTrk=) 13: tbcmmXBw3ZIYzwt4SULlG4fEW4c.roa (hash: 1XrkcGJtOYvvhy1+G9sGbL7q4EKrPWSn1X+QN9f+LUQ=) 14: uKuuYWmjqM2xupAEXFGSa3h-MaE.roa (hash: FAvKw/d08SYAWcoVLx+8l9dFyUcn/GaKHVNcCMbJaSs=) 15: vL7Zi_26wPMgcv7NcmYQVrG89-Y.roa (hash: rnnb+NddXrEWMTYiz1zv6rkvP1op88gCRHr3DNzUUbI=) 16: vxGSClUEKdIXCUT1_00M4kOwUk0.roa (hash: i237stsz2i1XaEU/WNLhg4As1B9TcbIPHRPFCYv5Hu0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/952230-c262-41cc-b956-cfc46a76ec78/1/N04nKbFzaYkKFRL2Q80I5Lov9BQ.crl rsync://rpki.ripe.net/repository/DEFAULT/58/952230-c262-41cc-b956-cfc46a76ec78/1/N04nKbFzaYkKFRL2Q80I5Lov9BQ.mft rsync://rpki.ripe.net/repository/DEFAULT/N04nKbFzaYkKFRL2Q80I5Lov9BQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 24 Feb 2026 09:00:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:8a:28:8b:84:68:54:43:96:b3:e8:e9:94:d9:18:fa:5e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=374e2729b17369890a1512f643cd08e4ba2ff414 Validity Not Before: Feb 23 11:00:38 2026 GMT Not After : Feb 24 11:00:38 2026 GMT Subject: CN=cc34139496b8cdab098d4fdf4bbdf457fc6d752f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:0c:24:10:88:9a:04:87:3f:9d:29:45:e0:ea: d9:27:8d:98:4c:c8:f6:52:38:52:7e:e6:ff:b6:04: 4f:5c:6a:54:c7:1b:47:c6:02:47:e9:36:8d:ca:fb: 70:91:cb:64:33:ca:3b:fc:18:6a:06:93:a4:47:69: ff:51:8f:57:b5:5d:29:96:1c:15:08:d6:a1:9b:11: 75:77:42:2e:eb:49:cf:0d:f4:55:42:79:94:4e:5d: e1:48:67:83:15:25:6b:f1:a3:17:61:31:dc:5f:a4: e3:0b:fa:be:90:1e:46:22:de:4c:52:0b:65:1f:0b: 7e:a0:78:5d:8c:6e:1e:16:0b:35:1c:ec:3c:4e:4b: c8:46:f4:bd:16:43:62:ca:7a:09:5b:89:59:b0:d4: e7:48:f1:f5:db:c5:29:63:56:ed:65:7e:ea:09:a3: cb:4a:1f:ec:8a:02:6e:1b:01:7a:38:bd:e6:44:ae: d4:8d:c4:63:4f:96:c6:be:0c:f2:45:01:c2:be:38: 33:22:9b:13:73:19:c1:48:05:c5:01:17:d4:50:73: e6:5e:07:e4:8a:dd:e0:6c:74:e4:77:f7:a2:3e:35: 26:63:29:a9:78:a4:18:65:70:14:f0:c8:68:a6:f5: 52:3e:09:37:a4:f2:5f:b5:ca:ee:95:db:43:64:b3: d5:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:34:13:94:96:B8:CD:AB:09:8D:4F:DF:4B:BD:F4:57:FC:6D:75:2F X509v3 Authority Key Identifier: keyid:37:4E:27:29:B1:73:69:89:0A:15:12:F6:43:CD:08:E4:BA:2F:F4:14 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N04nKbFzaYkKFRL2Q80I5Lov9BQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/952230-c262-41cc-b956-cfc46a76ec78/1/N04nKbFzaYkKFRL2Q80I5Lov9BQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/58/952230-c262-41cc-b956-cfc46a76ec78/1/N04nKbFzaYkKFRL2Q80I5Lov9BQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 43:f2:1e:55:68:d7:e1:e4:de:cc:b7:78:73:0f:d7:78:26:89: 2a:4d:37:01:20:b7:38:8f:39:54:82:cb:7c:9d:18:d7:ee:10: c9:f8:a5:e4:e7:9c:aa:9f:76:d7:a7:b1:1c:a9:56:ab:7d:a0: 8b:9b:9b:43:90:1e:36:96:23:86:e4:f5:95:e8:53:32:5d:70: 04:2e:7b:e6:61:e9:5a:68:01:1d:7f:17:ad:9a:79:8a:0e:fb: 70:06:43:9c:f6:5d:b7:27:6d:e8:c9:4c:2f:97:88:69:c6:fc: 8c:76:d0:66:ab:03:f5:ea:59:36:05:05:44:ce:f6:f8:a8:1e: df:79:de:72:39:68:f0:22:60:e1:d2:9b:1d:e8:42:fe:80:80: df:a9:fa:24:ab:a2:d4:1b:64:f9:30:7d:16:b6:f7:c2:2c:93: db:8e:21:9f:f5:cd:09:d8:aa:76:3e:77:ea:68:64:4c:fd:9d: 5c:6a:fb:9a:c9:0a:c2:dc:ad:4b:96:c4:29:49:0f:c6:b8:e5: 5c:30:35:39:ec:79:3e:7c:ac:93:82:7c:6c:f9:63:3e:80:fc: 96:4e:d4:05:61:62:96:05:9e:b9:dd:d3:84:46:de:73:08:3c: 65:8a:f7:b2:90:5a:d1:1a:9d:ec:89:75:41:e3:6c:a0:1c:e5: 01:8b:b3:ce -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZyKKIuEaFRDlrPo6ZTZGPpeMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM3NGUyNzI5YjE3MzY5ODkwYTE1MTJmNjQzY2QwOGU0YmEy ZmY0MTQwHhcNMjYwMjIzMTEwMDM4WhcNMjYwMjI0MTEwMDM4WjAzMTEwLwYDVQQD EyhjYzM0MTM5NDk2YjhjZGFiMDk4ZDRmZGY0YmJkZjQ1N2ZjNmQ3NTJmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqAwkEIiaBIc/nSlF4OrZJ42YTMj2 UjhSfub/tgRPXGpUxxtHxgJH6TaNyvtwkctkM8o7/BhqBpOkR2n/UY9XtV0plhwV CNahmxF1d0Iu60nPDfRVQnmUTl3hSGeDFSVr8aMXYTHcX6TjC/q+kB5GIt5MUgtl Hwt+oHhdjG4eFgs1HOw8TkvIRvS9FkNiynoJW4lZsNTnSPH128UpY1btZX7qCaPL Sh/sigJuGwF6OL3mRK7UjcRjT5bGvgzyRQHCvjgzIpsTcxnBSAXFARfUUHPmXgfk it3gbHTkd/eiPjUmYympeKQYZXAU8MhopvVSPgk3pPJftcruldtDZLPVrQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMw0E5SWuM2rCY1P30u99Ff8bXUvMB8GA1UdIwQY MBaAFDdOJymxc2mJChUS9kPNCOS6L/QUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTjA0bktiRnphWWtLRlJMMlE4MEk1TG92OUJRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OC85NTIyMzAtYzI2Mi00MWNjLWI5NTYt Y2ZjNDZhNzZlYzc4LzEvTjA0bktiRnphWWtLRlJMMlE4MEk1TG92OUJRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81OC85NTIyMzAtYzI2Mi00MWNjLWI5NTYtY2ZjNDZhNzZlYzc4 LzEvTjA0bktiRnphWWtLRlJMMlE4MEk1TG92OUJRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQ/IeVWjX 4eTezLd4cw/XeCaJKk03ASC3OI85VILLfJ0Y1+4Qyfil5Oecqp9216exHKlWq32g i5ubQ5AeNpYjhuT1lehTMl1wBC575mHpWmgBHX8XrZp5ig77cAZDnPZdtydt6MlM L5eIacb8jHbQZqsD9epZNgUFRM72+Kge33necjlo8CJg4dKbHehC/oCA36n6JKui 1Btk+TB9Frb3wiyT244hn/XNCdiqdj536mhkTP2dXGr7mskKwtytS5bEKUkPxrjl XDA1Oex5Pnysk4J8bPljPoD8lk7UBWFilgWeud3ThEbecwg8ZYr3spBa0Rqd7Il1 QeNsoBzlAYuzzg== -----END CERTIFICATE-----Generated at Mon Feb 23 13:53:25 2026 by rpki-client