$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/58/952230-c262-41cc-b956-cfc46a76ec78/1/N04nKbFzaYkKFRL2Q80I5Lov9BQ.mft File: N04nKbFzaYkKFRL2Q80I5Lov9BQ.mft (raw, json) Hash identifier: GHL79lNT99veITUR2K5sJANsYT3xNQ/cemOS1s5e+m0= Subject key identifier: AB:D8:EC:81:87:9F:A4:32:A7:45:F4:2A:7E:6C:DB:14:D0:C2:7D:5D Authority key identifier: 37:4E:27:29:B1:73:69:89:0A:15:12:F6:43:CD:08:E4:BA:2F:F4:14 Certificate issuer: /CN=374e2729b17369890a1512f643cd08e4ba2ff414 Certificate serial: 01A0C47C65CFD5F7B9D3D8C724BF13E5E30B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/N04nKbFzaYkKFRL2Q80I5Lov9BQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/952230-c262-41cc-b956-cfc46a76ec78/1/N04nKbFzaYkKFRL2Q80I5Lov9BQ.mft Manifest number: 12EA Signing time: Mon 21 Sep 2026 15:01:21 +0000 Manifest this update: Mon 21 Sep 2026 15:01:21 +0000 Manifest next update: Tue 22 Sep 2026 15:01:21 +0000 Files and hashes: 1: 9L3_BjUt_Pkd4lNYNY4IEdG62Oo.roa (hash: vOAxZY4XkVH9qyzLfhiBzlAaImKBkCi4da5tiiu6/bw=) 2: GNlA9Djc01_DIxMgMXZBVVZA1yU.roa (hash: 7/jOmr8/wXHfFoWsgICU+xbOKLK7NXJAz5aYH9GIqUg=) 3: N04nKbFzaYkKFRL2Q80I5Lov9BQ.crl (hash: JQ9mRB+LvArJbat/PlHS5p0BtkhSLgxnh2ubVTbXV0k=) 4: T6tjope32KekAaANH2cDVM3Bd9k.roa (hash: 9xa2u1KnWt12GiywGNOlfGRCJPP0+ZYG6OMmHhnqVtY=) 5: TdqSn5WT6bBIWHwKcBQStfLEQ8c.roa (hash: TGw0y4tzt3XMgXJsUXMt46Gd2692xH2itYwdSwfZDS4=) 6: UikTrUC-2DsDHw5Izq7A013vsK4.roa (hash: WWeo5jlTxNVbDlt52GNnE81h3OK/EnTtfPjD3xyIbrg=) 7: bxYbt9Cn4R10yajjbMPCKKg_YHc.roa (hash: 8byOzQfwF/KOVbj8pNAWquwbx3xGB2NYpi6Uf3icLsA=) 8: hZiFcW7h5F5XfcXkHDMH450e4sg.roa (hash: D2HtChe92Pq7COg3X4YoKzG61XVo1IcROxs8V7eIHbE=) 9: k-eSrqeXL71w-nhYF8XhonC5sgE.roa (hash: pMZO0gbnwiTypIUzIs1wrF7zpRP+hjOJxinJEWPhOb8=) 10: k1QjV3pgzlwvmbzPzUX7R2KWHvc.roa (hash: wEZygrh3ZXDp7V3oFcFdmkvylWDdJbyp7T5ic216Yzg=) 11: rnlQK5dhYROPwVOz0gIHy2hThyA.roa (hash: ePpSMaFTViP+SRbpfZ7RDlUyIWzyjKKxE4TEHxPptd8=) 12: s0LJxcrA6NEOVotU612Fnf2S5ek.roa (hash: I+fPBNeq55OXeCUKgKO9o96f3LbnL4TA94Ayj0fCu0c=) 13: sdcPQ034WzV8-mwdtcJH6aVjl9c.roa (hash: zgRjTN+TOMTbzC05YvDtYP4QKYhF7SxR32E0NAVGTrk=) 14: uKuuYWmjqM2xupAEXFGSa3h-MaE.roa (hash: FAvKw/d08SYAWcoVLx+8l9dFyUcn/GaKHVNcCMbJaSs=) 15: vL7Zi_26wPMgcv7NcmYQVrG89-Y.roa (hash: rnnb+NddXrEWMTYiz1zv6rkvP1op88gCRHr3DNzUUbI=) 16: vxGSClUEKdIXCUT1_00M4kOwUk0.roa (hash: i237stsz2i1XaEU/WNLhg4As1B9TcbIPHRPFCYv5Hu0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/952230-c262-41cc-b956-cfc46a76ec78/1/N04nKbFzaYkKFRL2Q80I5Lov9BQ.crl rsync://rpki.ripe.net/repository/DEFAULT/58/952230-c262-41cc-b956-cfc46a76ec78/1/N04nKbFzaYkKFRL2Q80I5Lov9BQ.mft rsync://rpki.ripe.net/repository/DEFAULT/N04nKbFzaYkKFRL2Q80I5Lov9BQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 22 Sep 2026 14:16:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a0:c4:7c:65:cf:d5:f7:b9:d3:d8:c7:24:bf:13:e5:e3:0b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=374e2729b17369890a1512f643cd08e4ba2ff414 Validity Not Before: Sep 21 15:01:21 2026 GMT Not After : Sep 22 15:01:21 2026 GMT Subject: CN=abd8ec81879fa432a745f42a7e6cdb14d0c27d5d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:51:7f:5b:2b:8d:e2:f2:09:8d:51:e3:d6:04: bf:3b:7d:c5:c9:08:f2:7f:f5:64:5e:53:5b:ac:09: 84:a7:99:30:31:a7:d8:1e:d6:ef:4d:34:92:24:88: a6:c1:8c:0b:d2:1e:81:be:2d:b3:11:47:48:29:16: ba:f2:e5:86:20:24:c0:79:f5:9d:5c:32:ae:c4:f7: 19:4a:13:21:18:21:e7:d1:b3:5b:f4:4e:ba:c1:2e: 61:08:4d:ea:8d:cd:4b:26:0e:e3:5b:02:fc:50:53: 80:ae:cf:c4:c5:33:f8:6e:3f:fc:d4:bd:f3:06:5f: cc:52:fe:ac:48:9a:31:09:63:02:33:71:2f:8b:d9: 58:c3:0b:22:f5:fc:e4:c3:50:45:39:c1:11:b3:19: cd:d9:17:91:7f:7f:1a:eb:a8:62:44:5c:5e:9d:7b: 56:0a:b4:db:56:a5:2f:8e:91:02:8a:7b:60:3e:8c: fc:39:4f:a5:ce:96:f1:15:ce:69:03:18:ed:58:bf: fc:aa:84:62:b6:69:75:36:f0:90:63:33:09:58:c9: f9:42:3a:d3:9e:2f:a6:dc:0e:a6:9a:af:b9:f9:91: 1e:c2:a6:a5:65:45:46:44:94:40:76:ea:2b:95:b7: 2d:31:6a:5b:b6:7d:78:ce:2c:5d:8f:94:85:ae:59: 7e:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:D8:EC:81:87:9F:A4:32:A7:45:F4:2A:7E:6C:DB:14:D0:C2:7D:5D X509v3 Authority Key Identifier: keyid:37:4E:27:29:B1:73:69:89:0A:15:12:F6:43:CD:08:E4:BA:2F:F4:14 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N04nKbFzaYkKFRL2Q80I5Lov9BQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/952230-c262-41cc-b956-cfc46a76ec78/1/N04nKbFzaYkKFRL2Q80I5Lov9BQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/58/952230-c262-41cc-b956-cfc46a76ec78/1/N04nKbFzaYkKFRL2Q80I5Lov9BQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8f:e7:85:e1:b0:5e:53:df:1f:93:18:c1:92:a4:97:b0:d2:bb: 22:99:cc:a2:b8:55:52:6f:a0:21:80:e1:aa:26:c0:21:51:6b: b6:59:ee:7d:81:7f:ba:6e:f8:6a:6e:f6:a3:b1:04:1d:cb:72: 42:7f:cf:3c:b2:99:a4:78:6c:f8:10:76:e6:c9:6a:78:56:c9: ca:99:3f:ed:dd:05:9d:bd:ec:b6:0f:5a:b8:4e:08:9e:a3:f7: de:4a:c5:05:a9:0d:b9:09:6c:a4:50:90:99:da:69:ad:3f:3f: da:4d:02:e9:9d:85:d4:3c:fa:ec:de:7d:6b:2a:b8:e7:be:c4: 14:db:49:98:f5:2b:18:8b:bd:d7:aa:09:59:64:4d:15:f1:d6: 44:2c:fa:11:c9:f2:ce:88:f0:05:1c:53:dd:4f:58:b5:76:57: d0:66:df:fd:d5:b8:ad:86:9d:56:55:d6:96:0a:2e:d5:ff:77: 19:1c:5f:65:32:67:3c:81:e5:d4:b4:5b:2d:fc:4e:e8:99:7c: 36:e0:b9:2e:50:6f:5c:ea:33:7e:b5:e9:ee:cd:66:20:cc:2a: 29:bc:7c:f6:57:1d:54:09:40:c4:2b:1b:99:ff:f1:f3:68:d9: 77:6b:ee:5e:cc:e2:b8:44:de:59:6c:6c:3b:8f:6f:e6:99:8d: af:43:d6:3c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaDEfGXP1fe509jHJL8T5eMLMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM3NGUyNzI5YjE3MzY5ODkwYTE1MTJmNjQzY2QwOGU0YmEy ZmY0MTQwHhcNMjYwOTIxMTUwMTIxWhcNMjYwOTIyMTUwMTIxWjAzMTEwLwYDVQQD EyhhYmQ4ZWM4MTg3OWZhNDMyYTc0NWY0MmE3ZTZjZGIxNGQwYzI3ZDVkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoVF/WyuN4vIJjVHj1gS/O33FyQjy f/VkXlNbrAmEp5kwMafYHtbvTTSSJIimwYwL0h6Bvi2zEUdIKRa68uWGICTAefWd XDKuxPcZShMhGCHn0bNb9E66wS5hCE3qjc1LJg7jWwL8UFOArs/ExTP4bj/81L3z Bl/MUv6sSJoxCWMCM3Evi9lYwwsi9fzkw1BFOcERsxnN2ReRf38a66hiRFxenXtW CrTbVqUvjpECintgPoz8OU+lzpbxFc5pAxjtWL/8qoRitml1NvCQYzMJWMn5QjrT ni+m3A6mmq+5+ZEewqalZUVGRJRAduorlbctMWpbtn14zixdj5SFrll+iQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKvY7IGHn6Qyp0X0Kn5s2xTQwn1dMB8GA1UdIwQY MBaAFDdOJymxc2mJChUS9kPNCOS6L/QUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTjA0bktiRnphWWtLRlJMMlE4MEk1TG92OUJRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OC85NTIyMzAtYzI2Mi00MWNjLWI5NTYt Y2ZjNDZhNzZlYzc4LzEvTjA0bktiRnphWWtLRlJMMlE4MEk1TG92OUJRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81OC85NTIyMzAtYzI2Mi00MWNjLWI5NTYtY2ZjNDZhNzZlYzc4 LzEvTjA0bktiRnphWWtLRlJMMlE4MEk1TG92OUJRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAj+eF4bBe U98fkxjBkqSXsNK7IpnMorhVUm+gIYDhqibAIVFrtlnufYF/um74am72o7EEHcty Qn/PPLKZpHhs+BB25slqeFbJypk/7d0Fnb3stg9auE4InqP33krFBakNuQlspFCQ mdpprT8/2k0C6Z2F1Dz67N59ayq4577EFNtJmPUrGIu916oJWWRNFfHWRCz6Ecny zojwBRxT3U9YtXZX0Gbf/dW4rYadVlXWlgou1f93GRxfZTJnPIHl1LRbLfxO6Jl8 NuC5LlBvXOozfrXp7s1mIMwqKbx89lcdVAlAxCsbmf/x82jZd2vuXsziuETeWWxs O49v5pmNr0PWPA== -----END CERTIFICATE-----Generated at Mon Sep 21 21:42:55 2026 by rpki-client