$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/952230-c262-41cc-b956-cfc46a76ec78/1/N04nKbFzaYkKFRL2Q80I5Lov9BQ.mft File: N04nKbFzaYkKFRL2Q80I5Lov9BQ.mft (raw, json) Hash identifier: vkB391ghyGEZBtGZlmZT5bLPqueJVtOrb5zJXqN7E6M= Subject key identifier: 6A:E8:F9:99:F4:CB:0B:DC:8A:ED:EB:0E:23:6C:B7:7A:AB:74:B8:49 Authority key identifier: 37:4E:27:29:B1:73:69:89:0A:15:12:F6:43:CD:08:E4:BA:2F:F4:14 Certificate issuer: /CN=374e2729b17369890a1512f643cd08e4ba2ff414 Certificate serial: 019D269633D6BC9E511F0AEE53423E183E63 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/N04nKbFzaYkKFRL2Q80I5Lov9BQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/952230-c262-41cc-b956-cfc46a76ec78/1/N04nKbFzaYkKFRL2Q80I5Lov9BQ.mft Manifest number: 1103 Signing time: Wed 25 Mar 2026 20:01:10 +0000 Manifest this update: Wed 25 Mar 2026 20:01:10 +0000 Manifest next update: Thu 26 Mar 2026 20:01:10 +0000 Files and hashes: 1: 9L3_BjUt_Pkd4lNYNY4IEdG62Oo.roa (hash: vOAxZY4XkVH9qyzLfhiBzlAaImKBkCi4da5tiiu6/bw=) 2: N04nKbFzaYkKFRL2Q80I5Lov9BQ.crl (hash: cQbrX02Bu3ArZnQtnqJQzdNTjyXsPNAj3VI2BvEUTHc=) 3: T6tjope32KekAaANH2cDVM3Bd9k.roa (hash: 9xa2u1KnWt12GiywGNOlfGRCJPP0+ZYG6OMmHhnqVtY=) 4: UikTrUC-2DsDHw5Izq7A013vsK4.roa (hash: WWeo5jlTxNVbDlt52GNnE81h3OK/EnTtfPjD3xyIbrg=) 5: bxYbt9Cn4R10yajjbMPCKKg_YHc.roa (hash: 8byOzQfwF/KOVbj8pNAWquwbx3xGB2NYpi6Uf3icLsA=) 6: hZiFcW7h5F5XfcXkHDMH450e4sg.roa (hash: D2HtChe92Pq7COg3X4YoKzG61XVo1IcROxs8V7eIHbE=) 7: k-eSrqeXL71w-nhYF8XhonC5sgE.roa (hash: pMZO0gbnwiTypIUzIs1wrF7zpRP+hjOJxinJEWPhOb8=) 8: k1QjV3pgzlwvmbzPzUX7R2KWHvc.roa (hash: wEZygrh3ZXDp7V3oFcFdmkvylWDdJbyp7T5ic216Yzg=) 9: nV6x1ARqVoKhDBvVitzUNib3WX8.roa (hash: 4la/SYuIQD/3eli4W4FOUYyY4QVHr6ZjIk4P9pj+v4o=) 10: rnlQK5dhYROPwVOz0gIHy2hThyA.roa (hash: ePpSMaFTViP+SRbpfZ7RDlUyIWzyjKKxE4TEHxPptd8=) 11: s0LJxcrA6NEOVotU612Fnf2S5ek.roa (hash: I+fPBNeq55OXeCUKgKO9o96f3LbnL4TA94Ayj0fCu0c=) 12: sdcPQ034WzV8-mwdtcJH6aVjl9c.roa (hash: zgRjTN+TOMTbzC05YvDtYP4QKYhF7SxR32E0NAVGTrk=) 13: tbcmmXBw3ZIYzwt4SULlG4fEW4c.roa (hash: 1XrkcGJtOYvvhy1+G9sGbL7q4EKrPWSn1X+QN9f+LUQ=) 14: uKuuYWmjqM2xupAEXFGSa3h-MaE.roa (hash: FAvKw/d08SYAWcoVLx+8l9dFyUcn/GaKHVNcCMbJaSs=) 15: vL7Zi_26wPMgcv7NcmYQVrG89-Y.roa (hash: rnnb+NddXrEWMTYiz1zv6rkvP1op88gCRHr3DNzUUbI=) 16: vxGSClUEKdIXCUT1_00M4kOwUk0.roa (hash: i237stsz2i1XaEU/WNLhg4As1B9TcbIPHRPFCYv5Hu0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/952230-c262-41cc-b956-cfc46a76ec78/1/N04nKbFzaYkKFRL2Q80I5Lov9BQ.crl rsync://rpki.ripe.net/repository/DEFAULT/58/952230-c262-41cc-b956-cfc46a76ec78/1/N04nKbFzaYkKFRL2Q80I5Lov9BQ.mft rsync://rpki.ripe.net/repository/DEFAULT/N04nKbFzaYkKFRL2Q80I5Lov9BQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 26 Mar 2026 15:17:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9d:26:96:33:d6:bc:9e:51:1f:0a:ee:53:42:3e:18:3e:63 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=374e2729b17369890a1512f643cd08e4ba2ff414 Validity Not Before: Mar 25 20:01:10 2026 GMT Not After : Mar 26 20:01:10 2026 GMT Subject: CN=6ae8f999f4cb0bdc8aedeb0e236cb77aab74b849 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:8c:4f:d2:c4:a9:ce:1a:de:1a:64:df:47:b3: 66:69:7d:f8:07:25:a3:78:a5:ba:35:51:94:a8:0c: b8:d1:05:23:69:26:05:b1:69:90:4d:aa:94:ba:b2: 91:ec:c4:29:fd:a2:39:8a:2d:0e:f3:8f:02:04:5e: 03:68:a5:66:80:66:07:78:6b:f9:d7:b4:0d:02:4e: 47:15:fe:9d:c1:35:a8:b9:78:11:32:9b:e3:50:15: 51:3d:ea:49:24:03:18:be:ca:fb:10:d8:b6:fb:f1: b4:ae:6a:85:79:4f:75:b5:eb:38:20:bb:1e:7c:2d: 17:22:ad:2e:3b:6c:08:ef:95:67:70:1e:de:9b:aa: c4:1b:d9:9f:23:fe:e8:dc:ba:e8:41:6b:c2:b3:27: c6:77:a8:e4:50:9e:84:45:a1:47:1b:25:4e:4a:e0: 2a:2d:a0:b9:81:a7:55:e8:77:10:6c:86:a6:5a:a2: 87:f9:94:55:fa:52:75:f0:3b:09:cc:52:30:ca:0f: c7:06:bf:62:8c:ce:0d:68:d6:cf:ac:59:44:69:4f: f7:b5:9e:6f:e7:f4:37:f4:29:54:50:8e:b0:5f:87: 1f:32:1d:f6:53:14:92:04:38:1f:4e:d5:7d:6c:4f: a1:ab:dd:8f:90:64:16:eb:8e:05:31:8e:3d:60:7b: 95:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:E8:F9:99:F4:CB:0B:DC:8A:ED:EB:0E:23:6C:B7:7A:AB:74:B8:49 X509v3 Authority Key Identifier: keyid:37:4E:27:29:B1:73:69:89:0A:15:12:F6:43:CD:08:E4:BA:2F:F4:14 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N04nKbFzaYkKFRL2Q80I5Lov9BQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/952230-c262-41cc-b956-cfc46a76ec78/1/N04nKbFzaYkKFRL2Q80I5Lov9BQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/58/952230-c262-41cc-b956-cfc46a76ec78/1/N04nKbFzaYkKFRL2Q80I5Lov9BQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 01:f3:b8:d3:ab:cb:8c:76:08:f6:10:fe:da:72:7a:97:83:b0: 8f:f3:d2:88:a8:7f:e6:e7:a2:49:23:bc:93:25:2e:6f:27:75: d7:88:70:9c:9d:9b:02:9f:74:36:7d:ec:0c:9b:0b:16:67:00: e6:c8:c3:3a:7f:32:a0:fc:cf:ec:c5:db:1e:61:d0:a1:ca:03: 54:80:8b:60:90:ab:74:30:26:b6:16:0e:56:74:15:d4:0f:ca: 22:5f:1b:c2:84:54:39:9c:6f:7a:5f:e8:19:a4:64:3b:95:a9: aa:ee:a6:eb:88:12:85:b7:e0:5e:1f:b4:2d:67:74:a4:dd:59: 9a:28:2d:d8:23:94:79:97:f0:e6:f8:64:e1:c0:74:e7:27:b7: 75:45:d8:c6:48:e4:00:f0:5d:93:b4:a3:86:13:81:45:69:52: a2:50:4d:37:7b:e2:79:2a:e8:b6:4b:21:e0:95:79:e6:a6:54: 81:e1:a9:f7:28:5c:2f:93:ae:80:39:a7:f6:49:af:fb:92:e8: 43:e9:e3:2a:f8:52:60:e1:f6:4c:47:b0:bd:08:64:ec:0e:b9: c7:0b:2b:83:75:d2:b7:54:86:56:a0:2f:66:d8:f9:74:1b:26: 98:4d:52:fb:5b:3d:d4:69:b7:fd:97:de:57:86:40:21:49:cf: 09:47:69:6b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ0mljPWvJ5RHwruU0I+GD5jMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM3NGUyNzI5YjE3MzY5ODkwYTE1MTJmNjQzY2QwOGU0YmEy ZmY0MTQwHhcNMjYwMzI1MjAwMTEwWhcNMjYwMzI2MjAwMTEwWjAzMTEwLwYDVQQD Eyg2YWU4Zjk5OWY0Y2IwYmRjOGFlZGViMGUyMzZjYjc3YWFiNzRiODQ5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3YxP0sSpzhreGmTfR7NmaX34ByWj eKW6NVGUqAy40QUjaSYFsWmQTaqUurKR7MQp/aI5ii0O848CBF4DaKVmgGYHeGv5 17QNAk5HFf6dwTWouXgRMpvjUBVRPepJJAMYvsr7ENi2+/G0rmqFeU91tes4ILse fC0XIq0uO2wI75VncB7em6rEG9mfI/7o3LroQWvCsyfGd6jkUJ6ERaFHGyVOSuAq LaC5gadV6HcQbIamWqKH+ZRV+lJ18DsJzFIwyg/HBr9ijM4NaNbPrFlEaU/3tZ5v 5/Q39ClUUI6wX4cfMh32UxSSBDgfTtV9bE+hq92PkGQW644FMY49YHuV7QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGro+Zn0ywvciu3rDiNst3qrdLhJMB8GA1UdIwQY MBaAFDdOJymxc2mJChUS9kPNCOS6L/QUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTjA0bktiRnphWWtLRlJMMlE4MEk1TG92OUJRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OC85NTIyMzAtYzI2Mi00MWNjLWI5NTYt Y2ZjNDZhNzZlYzc4LzEvTjA0bktiRnphWWtLRlJMMlE4MEk1TG92OUJRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81OC85NTIyMzAtYzI2Mi00MWNjLWI5NTYtY2ZjNDZhNzZlYzc4 LzEvTjA0bktiRnphWWtLRlJMMlE4MEk1TG92OUJRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAfO406vL jHYI9hD+2nJ6l4Owj/PSiKh/5ueiSSO8kyUubyd114hwnJ2bAp90Nn3sDJsLFmcA 5sjDOn8yoPzP7MXbHmHQocoDVICLYJCrdDAmthYOVnQV1A/KIl8bwoRUOZxvel/o GaRkO5Wpqu6m64gShbfgXh+0LWd0pN1Zmigt2COUeZfw5vhk4cB05ye3dUXYxkjk APBdk7SjhhOBRWlSolBNN3vieSrotksh4JV55qZUgeGp9yhcL5OugDmn9kmv+5Lo Q+njKvhSYOH2TEewvQhk7A65xwsrg3XSt1SGVqAvZtj5dBsmmE1S+1s91Gm3/Zfe V4ZAIUnPCUdpaw== -----END CERTIFICATE-----Generated at Thu Mar 26 00:36:50 2026 by rpki-client