$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/58/952230-c262-41cc-b956-cfc46a76ec78/1/N04nKbFzaYkKFRL2Q80I5Lov9BQ.mft File: N04nKbFzaYkKFRL2Q80I5Lov9BQ.mft (raw, json) Hash identifier: 71VuLL7YDVQKLGq2+e4xdWSvyEgUHp4ts7OnbvT7TVQ= Subject key identifier: FE:A6:0D:AE:B0:14:A5:FF:11:E7:C7:4C:27:1D:FA:3E:7F:6B:99:44 Authority key identifier: 37:4E:27:29:B1:73:69:89:0A:15:12:F6:43:CD:08:E4:BA:2F:F4:14 Certificate issuer: /CN=374e2729b17369890a1512f643cd08e4ba2ff414 Certificate serial: 01A0E174FBD7F713B2390DAE0A33E9FD1476 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/N04nKbFzaYkKFRL2Q80I5Lov9BQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/952230-c262-41cc-b956-cfc46a76ec78/1/N04nKbFzaYkKFRL2Q80I5Lov9BQ.mft Manifest number: 12F9 Signing time: Sun 27 Sep 2026 06:02:15 +0000 Manifest this update: Sun 27 Sep 2026 06:02:15 +0000 Manifest next update: Mon 28 Sep 2026 06:02:15 +0000 Files and hashes: 1: 9L3_BjUt_Pkd4lNYNY4IEdG62Oo.roa (hash: vOAxZY4XkVH9qyzLfhiBzlAaImKBkCi4da5tiiu6/bw=) 2: GNlA9Djc01_DIxMgMXZBVVZA1yU.roa (hash: 7/jOmr8/wXHfFoWsgICU+xbOKLK7NXJAz5aYH9GIqUg=) 3: N04nKbFzaYkKFRL2Q80I5Lov9BQ.crl (hash: 6Zrm6rhZLJ70Qj9y4oPD5u3HRrQvb2YlYSJE+BfBpgo=) 4: T6tjope32KekAaANH2cDVM3Bd9k.roa (hash: 9xa2u1KnWt12GiywGNOlfGRCJPP0+ZYG6OMmHhnqVtY=) 5: TdqSn5WT6bBIWHwKcBQStfLEQ8c.roa (hash: TGw0y4tzt3XMgXJsUXMt46Gd2692xH2itYwdSwfZDS4=) 6: UikTrUC-2DsDHw5Izq7A013vsK4.roa (hash: WWeo5jlTxNVbDlt52GNnE81h3OK/EnTtfPjD3xyIbrg=) 7: bxYbt9Cn4R10yajjbMPCKKg_YHc.roa (hash: 8byOzQfwF/KOVbj8pNAWquwbx3xGB2NYpi6Uf3icLsA=) 8: hZiFcW7h5F5XfcXkHDMH450e4sg.roa (hash: D2HtChe92Pq7COg3X4YoKzG61XVo1IcROxs8V7eIHbE=) 9: k-eSrqeXL71w-nhYF8XhonC5sgE.roa (hash: pMZO0gbnwiTypIUzIs1wrF7zpRP+hjOJxinJEWPhOb8=) 10: k1QjV3pgzlwvmbzPzUX7R2KWHvc.roa (hash: wEZygrh3ZXDp7V3oFcFdmkvylWDdJbyp7T5ic216Yzg=) 11: rnlQK5dhYROPwVOz0gIHy2hThyA.roa (hash: ePpSMaFTViP+SRbpfZ7RDlUyIWzyjKKxE4TEHxPptd8=) 12: s0LJxcrA6NEOVotU612Fnf2S5ek.roa (hash: I+fPBNeq55OXeCUKgKO9o96f3LbnL4TA94Ayj0fCu0c=) 13: sdcPQ034WzV8-mwdtcJH6aVjl9c.roa (hash: zgRjTN+TOMTbzC05YvDtYP4QKYhF7SxR32E0NAVGTrk=) 14: uKuuYWmjqM2xupAEXFGSa3h-MaE.roa (hash: FAvKw/d08SYAWcoVLx+8l9dFyUcn/GaKHVNcCMbJaSs=) 15: vL7Zi_26wPMgcv7NcmYQVrG89-Y.roa (hash: rnnb+NddXrEWMTYiz1zv6rkvP1op88gCRHr3DNzUUbI=) 16: vxGSClUEKdIXCUT1_00M4kOwUk0.roa (hash: i237stsz2i1XaEU/WNLhg4As1B9TcbIPHRPFCYv5Hu0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/952230-c262-41cc-b956-cfc46a76ec78/1/N04nKbFzaYkKFRL2Q80I5Lov9BQ.crl rsync://rpki.ripe.net/repository/DEFAULT/58/952230-c262-41cc-b956-cfc46a76ec78/1/N04nKbFzaYkKFRL2Q80I5Lov9BQ.mft rsync://rpki.ripe.net/repository/DEFAULT/N04nKbFzaYkKFRL2Q80I5Lov9BQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 28 Sep 2026 04:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a0:e1:74:fb:d7:f7:13:b2:39:0d:ae:0a:33:e9:fd:14:76 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=374e2729b17369890a1512f643cd08e4ba2ff414 Validity Not Before: Sep 27 06:02:15 2026 GMT Not After : Sep 28 06:02:15 2026 GMT Subject: CN=fea60daeb014a5ff11e7c74c271dfa3e7f6b9944 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:3a:c9:50:e4:10:64:e0:3c:25:b6:d0:1b:d9: f4:1b:1a:01:88:4e:e0:84:a2:7f:fb:4c:27:70:81: 89:7e:b4:15:03:74:c1:32:9d:43:07:91:31:2f:d0: 88:1c:07:04:c7:00:d7:1c:b7:bc:39:a5:ee:4c:55: ad:40:09:3e:1c:00:05:fe:b8:83:b0:24:0a:93:69: a0:51:29:e0:41:b4:0b:aa:26:0b:8a:da:2d:fe:46: 1e:58:c5:bd:15:ea:87:61:a2:6e:b0:7e:16:e8:c4: 8f:9e:b1:7f:3c:d6:52:2a:79:67:2c:46:21:1b:5d: 9b:ef:99:ad:16:ca:0f:86:ef:19:64:f1:9a:1b:5b: 90:cb:96:9d:19:f4:85:19:4b:99:3b:11:d2:54:b0: e4:4c:e8:f3:37:79:6f:67:3b:6e:01:10:36:91:cc: a4:56:26:14:e8:8c:3f:00:75:39:e5:0f:d4:25:ee: 79:40:97:36:09:63:18:3c:4c:0d:ad:e4:22:58:7d: 8e:75:fe:6d:ed:c8:cb:71:0f:ac:a1:30:e1:95:a2: 83:9b:31:d0:e3:3c:da:2f:37:73:5d:1f:97:70:d7: 9a:da:ad:4b:fb:fc:85:7b:1e:d2:6e:ae:0e:7b:65: 5b:aa:0a:10:ae:a6:71:3a:93:5f:81:60:ce:e7:42: 9d:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:A6:0D:AE:B0:14:A5:FF:11:E7:C7:4C:27:1D:FA:3E:7F:6B:99:44 X509v3 Authority Key Identifier: keyid:37:4E:27:29:B1:73:69:89:0A:15:12:F6:43:CD:08:E4:BA:2F:F4:14 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N04nKbFzaYkKFRL2Q80I5Lov9BQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/952230-c262-41cc-b956-cfc46a76ec78/1/N04nKbFzaYkKFRL2Q80I5Lov9BQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/58/952230-c262-41cc-b956-cfc46a76ec78/1/N04nKbFzaYkKFRL2Q80I5Lov9BQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 60:f8:d7:61:48:49:ae:6e:ae:40:79:50:f6:ae:02:03:33:e1: 86:f7:e7:d2:8f:6e:cd:1c:10:13:83:ce:8e:5f:9e:5d:5a:4c: b9:28:5d:ae:77:fb:b1:4d:0d:33:5a:71:cb:84:91:e8:46:bb: 14:4f:cd:7c:f6:a3:dd:6f:90:15:64:a8:72:92:3a:ee:b0:a3: 3b:1f:ee:b3:ef:17:82:c7:46:69:b8:33:9a:60:34:c4:41:f5: 2b:ce:da:cb:ea:77:7e:db:79:3e:f7:87:be:e9:f9:fc:08:28: 8e:23:1a:28:a9:ec:52:68:78:c2:51:bd:5a:27:40:f4:74:e2: a9:2f:cd:65:f3:3f:2d:8f:fb:b8:19:1d:6e:6a:6a:6f:d6:c2: 3d:b2:95:78:fd:a7:85:42:cb:2b:e2:01:33:2d:a6:6d:5c:1a: e6:ca:11:1e:ff:b5:53:42:fc:e3:22:6a:2f:3e:97:8b:20:a5: 07:41:c7:28:de:02:21:cd:36:6c:1a:10:1f:f5:57:81:90:d3: 13:3f:b4:d3:8d:ac:6e:fb:f7:da:42:4e:2c:e0:52:54:4c:a8: 33:53:e3:b2:8c:39:b1:86:b0:b7:a4:e7:6e:bc:5c:a3:ec:2d: 3c:dc:39:a2:23:05:0a:1b:24:b0:81:83:4f:ff:98:58:3f:08: db:0a:95:e6 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaDhdPvX9xOyOQ2uCjPp/RR2MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM3NGUyNzI5YjE3MzY5ODkwYTE1MTJmNjQzY2QwOGU0YmEy ZmY0MTQwHhcNMjYwOTI3MDYwMjE1WhcNMjYwOTI4MDYwMjE1WjAzMTEwLwYDVQQD EyhmZWE2MGRhZWIwMTRhNWZmMTFlN2M3NGMyNzFkZmEzZTdmNmI5OTQ0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4jrJUOQQZOA8JbbQG9n0GxoBiE7g hKJ/+0wncIGJfrQVA3TBMp1DB5ExL9CIHAcExwDXHLe8OaXuTFWtQAk+HAAF/riD sCQKk2mgUSngQbQLqiYLitot/kYeWMW9FeqHYaJusH4W6MSPnrF/PNZSKnlnLEYh G12b75mtFsoPhu8ZZPGaG1uQy5adGfSFGUuZOxHSVLDkTOjzN3lvZztuARA2kcyk ViYU6Iw/AHU55Q/UJe55QJc2CWMYPEwNreQiWH2Odf5t7cjLcQ+soTDhlaKDmzHQ 4zzaLzdzXR+XcNea2q1L+/yFex7Sbq4Oe2VbqgoQrqZxOpNfgWDO50KdnQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFP6mDa6wFKX/EefHTCcd+j5/a5lEMB8GA1UdIwQY MBaAFDdOJymxc2mJChUS9kPNCOS6L/QUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTjA0bktiRnphWWtLRlJMMlE4MEk1TG92OUJRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OC85NTIyMzAtYzI2Mi00MWNjLWI5NTYt Y2ZjNDZhNzZlYzc4LzEvTjA0bktiRnphWWtLRlJMMlE4MEk1TG92OUJRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81OC85NTIyMzAtYzI2Mi00MWNjLWI5NTYtY2ZjNDZhNzZlYzc4 LzEvTjA0bktiRnphWWtLRlJMMlE4MEk1TG92OUJRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYPjXYUhJ rm6uQHlQ9q4CAzPhhvfn0o9uzRwQE4POjl+eXVpMuShdrnf7sU0NM1pxy4SR6Ea7 FE/NfPaj3W+QFWSocpI67rCjOx/us+8XgsdGabgzmmA0xEH1K87ay+p3ftt5PveH vun5/AgojiMaKKnsUmh4wlG9WidA9HTiqS/NZfM/LY/7uBkdbmpqb9bCPbKVeP2n hULLK+IBMy2mbVwa5soRHv+1U0L84yJqLz6XiyClB0HHKN4CIc02bBoQH/VXgZDT Ez+0042sbvv32kJOLOBSVEyoM1Pjsow5sYawt6Tnbrxco+wtPNw5oiMFChsksIGD T/+YWD8I2wqV5g== -----END CERTIFICATE-----Generated at Sun Sep 27 11:52:32 2026 by rpki-client