$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/952230-c262-41cc-b956-cfc46a76ec78/1/N04nKbFzaYkKFRL2Q80I5Lov9BQ.mft File: N04nKbFzaYkKFRL2Q80I5Lov9BQ.mft (raw, json) Hash identifier: pitTe1BfLRAQnc5q8OFF/C6djaxREzBpsOW6WNWLv8I= Subject key identifier: 6E:60:C0:82:8A:86:F2:FC:EA:8D:3C:15:55:55:B6:43:6D:6A:6F:23 Authority key identifier: 37:4E:27:29:B1:73:69:89:0A:15:12:F6:43:CD:08:E4:BA:2F:F4:14 Certificate issuer: /CN=374e2729b17369890a1512f643cd08e4ba2ff414 Certificate serial: 019E1DC6FDF1B904292F21B9F2292F74C7E9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/N04nKbFzaYkKFRL2Q80I5Lov9BQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/952230-c262-41cc-b956-cfc46a76ec78/1/N04nKbFzaYkKFRL2Q80I5Lov9BQ.mft Manifest number: 1183 Signing time: Tue 12 May 2026 20:00:40 +0000 Manifest this update: Tue 12 May 2026 20:00:40 +0000 Manifest next update: Wed 13 May 2026 20:00:40 +0000 Files and hashes: 1: 9L3_BjUt_Pkd4lNYNY4IEdG62Oo.roa (hash: vOAxZY4XkVH9qyzLfhiBzlAaImKBkCi4da5tiiu6/bw=) 2: N04nKbFzaYkKFRL2Q80I5Lov9BQ.crl (hash: 5oJfZGUH7lpqI8QNAm/Oap3q52Zy//sdFWFFDQ9Bzd0=) 3: T6tjope32KekAaANH2cDVM3Bd9k.roa (hash: 9xa2u1KnWt12GiywGNOlfGRCJPP0+ZYG6OMmHhnqVtY=) 4: UikTrUC-2DsDHw5Izq7A013vsK4.roa (hash: WWeo5jlTxNVbDlt52GNnE81h3OK/EnTtfPjD3xyIbrg=) 5: bxYbt9Cn4R10yajjbMPCKKg_YHc.roa (hash: 8byOzQfwF/KOVbj8pNAWquwbx3xGB2NYpi6Uf3icLsA=) 6: hZiFcW7h5F5XfcXkHDMH450e4sg.roa (hash: D2HtChe92Pq7COg3X4YoKzG61XVo1IcROxs8V7eIHbE=) 7: k-eSrqeXL71w-nhYF8XhonC5sgE.roa (hash: pMZO0gbnwiTypIUzIs1wrF7zpRP+hjOJxinJEWPhOb8=) 8: k1QjV3pgzlwvmbzPzUX7R2KWHvc.roa (hash: wEZygrh3ZXDp7V3oFcFdmkvylWDdJbyp7T5ic216Yzg=) 9: nV6x1ARqVoKhDBvVitzUNib3WX8.roa (hash: 4la/SYuIQD/3eli4W4FOUYyY4QVHr6ZjIk4P9pj+v4o=) 10: rnlQK5dhYROPwVOz0gIHy2hThyA.roa (hash: ePpSMaFTViP+SRbpfZ7RDlUyIWzyjKKxE4TEHxPptd8=) 11: s0LJxcrA6NEOVotU612Fnf2S5ek.roa (hash: I+fPBNeq55OXeCUKgKO9o96f3LbnL4TA94Ayj0fCu0c=) 12: sdcPQ034WzV8-mwdtcJH6aVjl9c.roa (hash: zgRjTN+TOMTbzC05YvDtYP4QKYhF7SxR32E0NAVGTrk=) 13: tbcmmXBw3ZIYzwt4SULlG4fEW4c.roa (hash: 1XrkcGJtOYvvhy1+G9sGbL7q4EKrPWSn1X+QN9f+LUQ=) 14: uKuuYWmjqM2xupAEXFGSa3h-MaE.roa (hash: FAvKw/d08SYAWcoVLx+8l9dFyUcn/GaKHVNcCMbJaSs=) 15: vL7Zi_26wPMgcv7NcmYQVrG89-Y.roa (hash: rnnb+NddXrEWMTYiz1zv6rkvP1op88gCRHr3DNzUUbI=) 16: vxGSClUEKdIXCUT1_00M4kOwUk0.roa (hash: i237stsz2i1XaEU/WNLhg4As1B9TcbIPHRPFCYv5Hu0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/952230-c262-41cc-b956-cfc46a76ec78/1/N04nKbFzaYkKFRL2Q80I5Lov9BQ.crl rsync://rpki.ripe.net/repository/DEFAULT/58/952230-c262-41cc-b956-cfc46a76ec78/1/N04nKbFzaYkKFRL2Q80I5Lov9BQ.mft rsync://rpki.ripe.net/repository/DEFAULT/N04nKbFzaYkKFRL2Q80I5Lov9BQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 13 May 2026 20:00:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9e:1d:c6:fd:f1:b9:04:29:2f:21:b9:f2:29:2f:74:c7:e9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=374e2729b17369890a1512f643cd08e4ba2ff414 Validity Not Before: May 12 20:00:40 2026 GMT Not After : May 13 20:00:40 2026 GMT Subject: CN=6e60c0828a86f2fcea8d3c155555b6436d6a6f23 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:63:d1:0e:03:9b:ad:f2:3d:7c:85:45:ac:11: 51:98:39:35:ad:79:0d:ea:af:e3:92:94:c3:c9:f3: 62:d5:07:76:48:29:de:c6:83:9c:58:c9:ae:86:80: 08:1b:14:69:b2:bc:5f:d3:eb:3b:3b:79:52:61:74: 0b:b9:92:a0:64:30:f7:b9:46:4e:85:e2:7a:da:25: d5:e4:d1:86:59:1d:af:59:38:19:b5:d0:dc:99:5f: 7c:36:4d:ac:e3:11:a4:f2:a6:70:17:6b:17:41:cf: cb:11:b7:e0:ba:c7:44:f6:a7:a1:d3:64:3c:3d:af: 9c:1c:9b:8d:25:4f:ec:a0:f5:c2:f8:de:9d:ee:a0: 1b:07:97:1d:14:64:8e:ce:b4:f2:58:25:80:07:cd: 8d:77:15:23:f6:b6:8d:c3:5d:dc:81:d3:91:ea:79: 64:51:e7:19:c7:13:aa:1e:87:61:bc:1d:2e:66:fa: 83:fc:36:58:e8:e7:9e:6a:36:72:cb:02:5d:45:46: fb:57:7a:51:08:a4:11:e2:20:5f:19:13:61:76:a5: ff:8e:e2:67:1c:ab:5e:97:7c:e5:30:50:52:d5:3b: 87:f8:a3:e1:38:56:07:e7:a6:8a:8f:f0:87:fb:26: bb:21:81:66:31:3b:5e:4a:4d:60:df:3d:a0:3b:31: 25:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6E:60:C0:82:8A:86:F2:FC:EA:8D:3C:15:55:55:B6:43:6D:6A:6F:23 X509v3 Authority Key Identifier: keyid:37:4E:27:29:B1:73:69:89:0A:15:12:F6:43:CD:08:E4:BA:2F:F4:14 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N04nKbFzaYkKFRL2Q80I5Lov9BQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/952230-c262-41cc-b956-cfc46a76ec78/1/N04nKbFzaYkKFRL2Q80I5Lov9BQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/58/952230-c262-41cc-b956-cfc46a76ec78/1/N04nKbFzaYkKFRL2Q80I5Lov9BQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7d:ea:73:2b:af:72:43:53:0a:6d:ef:61:30:43:d2:09:38:8b: 5b:e5:7e:91:96:70:15:70:46:af:4b:d1:83:f5:f7:e9:a0:97: b2:06:34:df:fc:de:0d:cd:b2:34:5e:86:6c:e9:77:12:0d:1a: 97:6b:1a:ab:cd:82:22:3b:58:76:d4:af:18:2f:31:da:b9:a1: aa:4b:be:bd:94:cf:1c:70:56:15:33:e3:69:2f:8d:aa:70:05: 25:d5:2c:a8:b7:37:06:8a:3e:e6:a2:82:a5:a8:cf:ce:85:e0: 66:6b:1d:6c:21:90:7b:74:f5:46:bc:a5:f7:c9:33:e5:7a:61: 03:99:f6:19:0f:ed:2f:89:e9:4d:f8:69:dd:52:89:74:40:a0: af:3a:75:45:88:a0:1d:7c:34:92:d9:76:a9:15:e3:f5:cf:7c: cf:92:cc:5f:89:a3:57:a4:8f:8e:a6:11:56:04:67:a7:46:d2: a4:22:5e:f5:8a:7e:a6:94:6b:dd:c4:f6:f7:51:37:d8:42:11: c5:c3:47:25:81:28:82:bb:3f:27:ce:02:0f:4c:ee:29:c0:5d: 22:cf:eb:13:94:99:51:b8:54:47:27:1b:c5:3b:c7:ad:c2:29: 06:3b:4d:1c:ec:c2:63:9e:17:57:e9:51:4b:c7:15:30:9b:86: 24:34:b7:d6 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ4dxv3xuQQpLyG58ikvdMfpMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM3NGUyNzI5YjE3MzY5ODkwYTE1MTJmNjQzY2QwOGU0YmEy ZmY0MTQwHhcNMjYwNTEyMjAwMDQwWhcNMjYwNTEzMjAwMDQwWjAzMTEwLwYDVQQD Eyg2ZTYwYzA4MjhhODZmMmZjZWE4ZDNjMTU1NTU1YjY0MzZkNmE2ZjIzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAymPRDgObrfI9fIVFrBFRmDk1rXkN 6q/jkpTDyfNi1Qd2SCnexoOcWMmuhoAIGxRpsrxf0+s7O3lSYXQLuZKgZDD3uUZO heJ62iXV5NGGWR2vWTgZtdDcmV98Nk2s4xGk8qZwF2sXQc/LEbfgusdE9qeh02Q8 Pa+cHJuNJU/soPXC+N6d7qAbB5cdFGSOzrTyWCWAB82NdxUj9raNw13cgdOR6nlk UecZxxOqHodhvB0uZvqD/DZY6OeeajZyywJdRUb7V3pRCKQR4iBfGRNhdqX/juJn HKtel3zlMFBS1TuH+KPhOFYH56aKj/CH+ya7IYFmMTteSk1g3z2gOzEl0wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFG5gwIKKhvL86o08FVVVtkNtam8jMB8GA1UdIwQY MBaAFDdOJymxc2mJChUS9kPNCOS6L/QUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTjA0bktiRnphWWtLRlJMMlE4MEk1TG92OUJRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OC85NTIyMzAtYzI2Mi00MWNjLWI5NTYt Y2ZjNDZhNzZlYzc4LzEvTjA0bktiRnphWWtLRlJMMlE4MEk1TG92OUJRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81OC85NTIyMzAtYzI2Mi00MWNjLWI5NTYtY2ZjNDZhNzZlYzc4 LzEvTjA0bktiRnphWWtLRlJMMlE4MEk1TG92OUJRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfepzK69y Q1MKbe9hMEPSCTiLW+V+kZZwFXBGr0vRg/X36aCXsgY03/zeDc2yNF6GbOl3Eg0a l2saq82CIjtYdtSvGC8x2rmhqku+vZTPHHBWFTPjaS+NqnAFJdUsqLc3Boo+5qKC pajPzoXgZmsdbCGQe3T1Rryl98kz5XphA5n2GQ/tL4npTfhp3VKJdECgrzp1RYig HXw0ktl2qRXj9c98z5LMX4mjV6SPjqYRVgRnp0bSpCJe9Yp+ppRr3cT291E32EIR xcNHJYEogrs/J84CD0zuKcBdIs/rE5SZUbhURycbxTvHrcIpBjtNHOzCY54XV+lR S8cVMJuGJDS31g== -----END CERTIFICATE-----Generated at Wed May 13 06:45:53 2026 by rpki-client