$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/952230-c262-41cc-b956-cfc46a76ec78/1/N04nKbFzaYkKFRL2Q80I5Lov9BQ.mft File: N04nKbFzaYkKFRL2Q80I5Lov9BQ.mft (raw, json) Hash identifier: L3vwPFkQlt59XMJPy7dInowLERmAWc0opiHsLdFDyeo= Subject key identifier: D6:BF:4B:D3:84:83:2D:13:7A:5F:49:A6:7F:B5:9C:57:98:10:FD:7E Authority key identifier: 37:4E:27:29:B1:73:69:89:0A:15:12:F6:43:CD:08:E4:BA:2F:F4:14 Certificate issuer: /CN=374e2729b17369890a1512f643cd08e4ba2ff414 Certificate serial: 019D9A752EA06BF7596DA7F81F9135FC1AEC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/N04nKbFzaYkKFRL2Q80I5Lov9BQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/952230-c262-41cc-b956-cfc46a76ec78/1/N04nKbFzaYkKFRL2Q80I5Lov9BQ.mft Manifest number: 113F Signing time: Fri 17 Apr 2026 08:01:04 +0000 Manifest this update: Fri 17 Apr 2026 08:01:04 +0000 Manifest next update: Sat 18 Apr 2026 08:01:04 +0000 Files and hashes: 1: 9L3_BjUt_Pkd4lNYNY4IEdG62Oo.roa (hash: vOAxZY4XkVH9qyzLfhiBzlAaImKBkCi4da5tiiu6/bw=) 2: N04nKbFzaYkKFRL2Q80I5Lov9BQ.crl (hash: rX9NzTNQG6oTdlpCj1/9tjwt5quTNV8zRpJSciBOvH4=) 3: T6tjope32KekAaANH2cDVM3Bd9k.roa (hash: 9xa2u1KnWt12GiywGNOlfGRCJPP0+ZYG6OMmHhnqVtY=) 4: UikTrUC-2DsDHw5Izq7A013vsK4.roa (hash: WWeo5jlTxNVbDlt52GNnE81h3OK/EnTtfPjD3xyIbrg=) 5: bxYbt9Cn4R10yajjbMPCKKg_YHc.roa (hash: 8byOzQfwF/KOVbj8pNAWquwbx3xGB2NYpi6Uf3icLsA=) 6: hZiFcW7h5F5XfcXkHDMH450e4sg.roa (hash: D2HtChe92Pq7COg3X4YoKzG61XVo1IcROxs8V7eIHbE=) 7: k-eSrqeXL71w-nhYF8XhonC5sgE.roa (hash: pMZO0gbnwiTypIUzIs1wrF7zpRP+hjOJxinJEWPhOb8=) 8: k1QjV3pgzlwvmbzPzUX7R2KWHvc.roa (hash: wEZygrh3ZXDp7V3oFcFdmkvylWDdJbyp7T5ic216Yzg=) 9: nV6x1ARqVoKhDBvVitzUNib3WX8.roa (hash: 4la/SYuIQD/3eli4W4FOUYyY4QVHr6ZjIk4P9pj+v4o=) 10: rnlQK5dhYROPwVOz0gIHy2hThyA.roa (hash: ePpSMaFTViP+SRbpfZ7RDlUyIWzyjKKxE4TEHxPptd8=) 11: s0LJxcrA6NEOVotU612Fnf2S5ek.roa (hash: I+fPBNeq55OXeCUKgKO9o96f3LbnL4TA94Ayj0fCu0c=) 12: sdcPQ034WzV8-mwdtcJH6aVjl9c.roa (hash: zgRjTN+TOMTbzC05YvDtYP4QKYhF7SxR32E0NAVGTrk=) 13: tbcmmXBw3ZIYzwt4SULlG4fEW4c.roa (hash: 1XrkcGJtOYvvhy1+G9sGbL7q4EKrPWSn1X+QN9f+LUQ=) 14: uKuuYWmjqM2xupAEXFGSa3h-MaE.roa (hash: FAvKw/d08SYAWcoVLx+8l9dFyUcn/GaKHVNcCMbJaSs=) 15: vL7Zi_26wPMgcv7NcmYQVrG89-Y.roa (hash: rnnb+NddXrEWMTYiz1zv6rkvP1op88gCRHr3DNzUUbI=) 16: vxGSClUEKdIXCUT1_00M4kOwUk0.roa (hash: i237stsz2i1XaEU/WNLhg4As1B9TcbIPHRPFCYv5Hu0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/952230-c262-41cc-b956-cfc46a76ec78/1/N04nKbFzaYkKFRL2Q80I5Lov9BQ.crl rsync://rpki.ripe.net/repository/DEFAULT/58/952230-c262-41cc-b956-cfc46a76ec78/1/N04nKbFzaYkKFRL2Q80I5Lov9BQ.mft rsync://rpki.ripe.net/repository/DEFAULT/N04nKbFzaYkKFRL2Q80I5Lov9BQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 18 Apr 2026 07:00:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9d:9a:75:2e:a0:6b:f7:59:6d:a7:f8:1f:91:35:fc:1a:ec Signature Algorithm: sha256WithRSAEncryption Issuer: CN=374e2729b17369890a1512f643cd08e4ba2ff414 Validity Not Before: Apr 17 08:01:04 2026 GMT Not After : Apr 18 08:01:04 2026 GMT Subject: CN=d6bf4bd384832d137a5f49a67fb59c579810fd7e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:01:7b:b9:6f:9a:87:b9:27:28:82:ce:50:3b: 60:7a:fa:1a:4a:a5:7a:d5:12:fa:5b:cb:cf:e3:d6: a5:e2:08:63:19:3f:d8:87:d7:9f:22:2f:68:29:ed: ac:ad:3f:2b:08:79:5a:92:fc:16:d9:76:bb:b6:ab: 45:a5:9d:d5:3d:c0:95:df:6f:a2:75:08:1f:aa:ed: 75:3b:e1:c0:71:4d:54:6e:a6:0f:e3:b4:08:cc:e3: 39:10:c7:94:e5:c5:dc:fa:53:28:13:91:99:c7:6e: 44:2c:b6:bb:ab:bc:f3:51:7e:80:70:9a:a0:08:f8: 10:47:17:f2:51:7d:d5:5c:23:50:4e:4e:51:1d:7d: fc:e5:85:3b:f8:89:d1:d8:e1:75:f5:c7:3e:a0:4a: 46:df:8b:af:b4:68:30:e1:21:b9:25:d4:2f:00:ce: a0:8f:94:6e:62:03:2b:69:97:35:97:2f:d7:4b:84: b6:09:24:32:de:aa:6d:94:33:7d:5b:48:7f:53:60: 59:dd:9c:ba:a4:b7:96:fb:51:cb:c7:4b:c4:59:dd: 8b:9e:53:a5:3e:80:f8:ed:d9:9e:4e:0a:32:bb:ad: 74:84:9f:84:b0:9c:01:38:ce:4c:87:29:6f:13:77: b7:4d:2a:3f:62:b2:0a:44:40:77:f4:9d:55:bb:2f: d7:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:BF:4B:D3:84:83:2D:13:7A:5F:49:A6:7F:B5:9C:57:98:10:FD:7E X509v3 Authority Key Identifier: keyid:37:4E:27:29:B1:73:69:89:0A:15:12:F6:43:CD:08:E4:BA:2F:F4:14 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N04nKbFzaYkKFRL2Q80I5Lov9BQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/952230-c262-41cc-b956-cfc46a76ec78/1/N04nKbFzaYkKFRL2Q80I5Lov9BQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/58/952230-c262-41cc-b956-cfc46a76ec78/1/N04nKbFzaYkKFRL2Q80I5Lov9BQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 56:63:b9:a7:4c:cb:7e:29:9f:d1:1e:88:6c:35:c0:96:bc:83: 71:64:2d:62:1b:b2:f4:1c:5a:1a:65:90:2d:6a:8d:fe:10:29: 62:44:5f:fb:c3:8a:1c:18:f9:97:92:0f:cc:a8:49:ba:1f:c9: 87:bd:5c:56:3c:4c:d8:b4:2a:99:c1:94:92:70:63:55:43:6f: f0:9c:aa:a2:b8:2c:8c:d6:7c:a2:2a:c7:5a:76:8b:46:04:10: 42:82:3b:83:91:03:c7:50:2d:3d:ee:d3:ee:f7:13:c4:d5:f0: 2c:80:d4:19:75:b3:07:72:77:cc:12:86:ae:8f:73:27:f2:cb: 40:28:25:d7:c0:00:82:8a:54:1b:c2:17:04:2d:a0:45:52:e1: fb:0e:58:a8:4d:6d:86:73:9b:16:08:b6:0b:21:bd:e3:b6:09: b5:23:ca:fb:d1:b8:7e:2c:4a:50:0d:fb:e4:06:32:12:97:be: 58:00:4e:62:6c:2e:66:c2:3c:28:aa:5f:7c:59:a1:8f:90:9b: 60:de:ec:aa:fe:7f:cd:db:41:2d:0e:f8:64:e4:79:4e:dc:23: 5a:93:6e:2e:51:88:b8:23:60:11:37:72:b1:5c:31:ad:ed:2a: 66:df:c7:a6:90:25:94:52:0c:6f:d7:bb:bf:18:52:f2:13:a5: 3f:d9:ef:d9 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ2adS6ga/dZbaf4H5E1/BrsMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM3NGUyNzI5YjE3MzY5ODkwYTE1MTJmNjQzY2QwOGU0YmEy ZmY0MTQwHhcNMjYwNDE3MDgwMTA0WhcNMjYwNDE4MDgwMTA0WjAzMTEwLwYDVQQD EyhkNmJmNGJkMzg0ODMyZDEzN2E1ZjQ5YTY3ZmI1OWM1Nzk4MTBmZDdlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxQF7uW+ah7knKILOUDtgevoaSqV6 1RL6W8vP49al4ghjGT/Yh9efIi9oKe2srT8rCHlakvwW2Xa7tqtFpZ3VPcCV32+i dQgfqu11O+HAcU1UbqYP47QIzOM5EMeU5cXc+lMoE5GZx25ELLa7q7zzUX6AcJqg CPgQRxfyUX3VXCNQTk5RHX385YU7+InR2OF19cc+oEpG34uvtGgw4SG5JdQvAM6g j5RuYgMraZc1ly/XS4S2CSQy3qptlDN9W0h/U2BZ3Zy6pLeW+1HLx0vEWd2LnlOl PoD47dmeTgoyu610hJ+EsJwBOM5MhylvE3e3TSo/YrIKREB39J1Vuy/XqwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNa/S9OEgy0Tel9Jpn+1nFeYEP1+MB8GA1UdIwQY MBaAFDdOJymxc2mJChUS9kPNCOS6L/QUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTjA0bktiRnphWWtLRlJMMlE4MEk1TG92OUJRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OC85NTIyMzAtYzI2Mi00MWNjLWI5NTYt Y2ZjNDZhNzZlYzc4LzEvTjA0bktiRnphWWtLRlJMMlE4MEk1TG92OUJRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81OC85NTIyMzAtYzI2Mi00MWNjLWI5NTYtY2ZjNDZhNzZlYzc4 LzEvTjA0bktiRnphWWtLRlJMMlE4MEk1TG92OUJRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVmO5p0zL fimf0R6IbDXAlryDcWQtYhuy9BxaGmWQLWqN/hApYkRf+8OKHBj5l5IPzKhJuh/J h71cVjxM2LQqmcGUknBjVUNv8JyqorgsjNZ8oirHWnaLRgQQQoI7g5EDx1AtPe7T 7vcTxNXwLIDUGXWzB3J3zBKGro9zJ/LLQCgl18AAgopUG8IXBC2gRVLh+w5YqE1t hnObFgi2CyG947YJtSPK+9G4fixKUA375AYyEpe+WABOYmwuZsI8KKpffFmhj5Cb YN7sqv5/zdtBLQ74ZOR5TtwjWpNuLlGIuCNgETdysVwxre0qZt/HppAllFIMb9e7 vxhS8hOlP9nv2Q== -----END CERTIFICATE-----Generated at Fri Apr 17 12:05:58 2026 by rpki-client