$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/58/952230-c262-41cc-b956-cfc46a76ec78/1/N04nKbFzaYkKFRL2Q80I5Lov9BQ.mft File: N04nKbFzaYkKFRL2Q80I5Lov9BQ.mft (raw, json) Hash identifier: tSsUdIDkRx7bupegCgXMw4K2pEVLxummw5ilrTp0OwA= Subject key identifier: 81:1B:7B:A7:7D:2E:E1:A8:72:C0:49:EC:04:69:E7:72:9E:84:8C:C1 Authority key identifier: 37:4E:27:29:B1:73:69:89:0A:15:12:F6:43:CD:08:E4:BA:2F:F4:14 Certificate issuer: /CN=374e2729b17369890a1512f643cd08e4ba2ff414 Certificate serial: 01A0E74098188BDD77A3C58411CCC809F801 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/N04nKbFzaYkKFRL2Q80I5Lov9BQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/952230-c262-41cc-b956-cfc46a76ec78/1/N04nKbFzaYkKFRL2Q80I5Lov9BQ.mft Manifest number: 12FC Signing time: Mon 28 Sep 2026 09:02:44 +0000 Manifest this update: Mon 28 Sep 2026 09:02:44 +0000 Manifest next update: Tue 29 Sep 2026 09:02:44 +0000 Files and hashes: 1: 9L3_BjUt_Pkd4lNYNY4IEdG62Oo.roa (hash: vOAxZY4XkVH9qyzLfhiBzlAaImKBkCi4da5tiiu6/bw=) 2: GNlA9Djc01_DIxMgMXZBVVZA1yU.roa (hash: 7/jOmr8/wXHfFoWsgICU+xbOKLK7NXJAz5aYH9GIqUg=) 3: N04nKbFzaYkKFRL2Q80I5Lov9BQ.crl (hash: q73kQHpP8cXMnMVr5xFVWdLGw5EeDCY7KqStlLixMqY=) 4: T6tjope32KekAaANH2cDVM3Bd9k.roa (hash: 9xa2u1KnWt12GiywGNOlfGRCJPP0+ZYG6OMmHhnqVtY=) 5: TdqSn5WT6bBIWHwKcBQStfLEQ8c.roa (hash: TGw0y4tzt3XMgXJsUXMt46Gd2692xH2itYwdSwfZDS4=) 6: UikTrUC-2DsDHw5Izq7A013vsK4.roa (hash: WWeo5jlTxNVbDlt52GNnE81h3OK/EnTtfPjD3xyIbrg=) 7: bxYbt9Cn4R10yajjbMPCKKg_YHc.roa (hash: 8byOzQfwF/KOVbj8pNAWquwbx3xGB2NYpi6Uf3icLsA=) 8: hZiFcW7h5F5XfcXkHDMH450e4sg.roa (hash: D2HtChe92Pq7COg3X4YoKzG61XVo1IcROxs8V7eIHbE=) 9: k-eSrqeXL71w-nhYF8XhonC5sgE.roa (hash: pMZO0gbnwiTypIUzIs1wrF7zpRP+hjOJxinJEWPhOb8=) 10: k1QjV3pgzlwvmbzPzUX7R2KWHvc.roa (hash: wEZygrh3ZXDp7V3oFcFdmkvylWDdJbyp7T5ic216Yzg=) 11: rnlQK5dhYROPwVOz0gIHy2hThyA.roa (hash: ePpSMaFTViP+SRbpfZ7RDlUyIWzyjKKxE4TEHxPptd8=) 12: s0LJxcrA6NEOVotU612Fnf2S5ek.roa (hash: I+fPBNeq55OXeCUKgKO9o96f3LbnL4TA94Ayj0fCu0c=) 13: sdcPQ034WzV8-mwdtcJH6aVjl9c.roa (hash: zgRjTN+TOMTbzC05YvDtYP4QKYhF7SxR32E0NAVGTrk=) 14: uKuuYWmjqM2xupAEXFGSa3h-MaE.roa (hash: FAvKw/d08SYAWcoVLx+8l9dFyUcn/GaKHVNcCMbJaSs=) 15: vL7Zi_26wPMgcv7NcmYQVrG89-Y.roa (hash: rnnb+NddXrEWMTYiz1zv6rkvP1op88gCRHr3DNzUUbI=) 16: vxGSClUEKdIXCUT1_00M4kOwUk0.roa (hash: i237stsz2i1XaEU/WNLhg4As1B9TcbIPHRPFCYv5Hu0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/952230-c262-41cc-b956-cfc46a76ec78/1/N04nKbFzaYkKFRL2Q80I5Lov9BQ.crl rsync://rpki.ripe.net/repository/DEFAULT/58/952230-c262-41cc-b956-cfc46a76ec78/1/N04nKbFzaYkKFRL2Q80I5Lov9BQ.mft rsync://rpki.ripe.net/repository/DEFAULT/N04nKbFzaYkKFRL2Q80I5Lov9BQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 29 Sep 2026 09:02:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a0:e7:40:98:18:8b:dd:77:a3:c5:84:11:cc:c8:09:f8:01 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=374e2729b17369890a1512f643cd08e4ba2ff414 Validity Not Before: Sep 28 09:02:44 2026 GMT Not After : Sep 29 09:02:44 2026 GMT Subject: CN=811b7ba77d2ee1a872c049ec0469e7729e848cc1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:cc:eb:c4:d4:81:74:fc:46:55:30:25:b7:1b: bd:35:0e:8b:f0:89:4a:e2:9f:51:21:b3:0b:a3:63: 6e:84:1d:63:dd:96:1f:c4:73:03:46:3c:24:ab:b3: 91:ef:9f:74:a9:63:2e:bc:88:ca:7c:8d:f4:32:da: 52:d5:ff:ae:03:77:90:82:2c:44:37:e4:e9:72:cf: 26:32:cc:1d:9c:eb:3f:44:21:95:46:95:13:1f:8b: da:56:62:dc:1e:04:b8:18:1c:aa:8a:8b:9f:cc:81: e8:1d:e7:7a:27:31:29:29:46:3e:39:b0:e3:2b:3d: 58:8c:50:db:98:f5:0f:51:2c:1d:94:60:cc:fb:2a: 7a:95:a8:3e:85:cd:4e:bb:62:a3:a4:5c:d3:03:cf: a8:84:dd:80:82:b9:54:40:cc:39:df:5c:83:02:e0: 1b:b3:3e:42:fa:fa:2c:6a:e1:71:d1:54:41:54:35: 37:77:bd:06:4b:16:81:87:70:93:cf:82:48:f3:94: 92:cf:a1:ef:ed:af:e2:53:be:11:17:ce:1e:d0:7c: 08:a5:e5:a3:a9:45:62:7f:2c:90:1a:44:f1:8f:0b: 78:ed:af:9f:ed:26:33:42:a7:58:3a:5b:96:7e:1f: 85:1a:38:af:a6:4a:29:04:14:e4:3e:f6:52:e3:c9: 95:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:1B:7B:A7:7D:2E:E1:A8:72:C0:49:EC:04:69:E7:72:9E:84:8C:C1 X509v3 Authority Key Identifier: keyid:37:4E:27:29:B1:73:69:89:0A:15:12:F6:43:CD:08:E4:BA:2F:F4:14 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N04nKbFzaYkKFRL2Q80I5Lov9BQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/952230-c262-41cc-b956-cfc46a76ec78/1/N04nKbFzaYkKFRL2Q80I5Lov9BQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/58/952230-c262-41cc-b956-cfc46a76ec78/1/N04nKbFzaYkKFRL2Q80I5Lov9BQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7d:17:70:89:e5:32:10:a8:4d:a2:79:98:22:9e:a1:d6:d5:4c: e6:f7:9b:91:b1:7d:f1:2a:e3:95:c2:e7:ba:24:55:4f:d7:62: 8e:d6:a1:25:9c:a9:6d:cb:19:1a:bc:12:7a:f4:42:b6:57:dd: d2:8d:2a:fe:f9:6c:02:82:78:d4:b6:5f:88:13:dc:c5:51:9a: a8:a1:50:6d:75:df:b2:43:10:88:b5:8a:28:e4:8d:33:0c:8c: 3b:5e:c6:54:4d:08:aa:f4:a1:3d:ab:56:86:57:1a:df:84:b3: 28:51:bb:6b:7f:c5:8a:5c:d8:2d:7a:b3:96:8b:e2:8b:09:e1: 01:72:58:68:02:36:3f:9b:4e:5e:71:b4:e9:c7:d6:a8:77:58: fc:a7:98:99:7a:01:47:9a:a9:7b:90:0c:8a:d2:19:8b:e9:5b: 06:bd:a1:d1:e8:a8:2c:e0:bb:74:4c:f4:c9:ac:cf:76:c0:49: 62:6f:e3:78:1b:38:9a:42:b4:b2:ac:9c:7d:5e:1b:4a:bf:39: b2:29:a7:fe:3f:a7:67:a0:77:e8:61:54:97:f5:5e:7e:e5:6f: c5:0c:f7:8b:9b:ec:ed:d6:8e:98:81:c3:9b:32:aa:ce:dc:0e: d9:79:ac:0a:42:93:03:b2:f0:d8:de:fb:ac:c5:87:51:52:b4: 39:12:a1:75 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaDnQJgYi913o8WEEczICfgBMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM3NGUyNzI5YjE3MzY5ODkwYTE1MTJmNjQzY2QwOGU0YmEy ZmY0MTQwHhcNMjYwOTI4MDkwMjQ0WhcNMjYwOTI5MDkwMjQ0WjAzMTEwLwYDVQQD Eyg4MTFiN2JhNzdkMmVlMWE4NzJjMDQ5ZWMwNDY5ZTc3MjllODQ4Y2MxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4MzrxNSBdPxGVTAltxu9NQ6L8IlK 4p9RIbMLo2NuhB1j3ZYfxHMDRjwkq7OR7590qWMuvIjKfI30MtpS1f+uA3eQgixE N+Tpcs8mMswdnOs/RCGVRpUTH4vaVmLcHgS4GByqioufzIHoHed6JzEpKUY+ObDj Kz1YjFDbmPUPUSwdlGDM+yp6lag+hc1Ou2KjpFzTA8+ohN2AgrlUQMw531yDAuAb sz5C+vosauFx0VRBVDU3d70GSxaBh3CTz4JI85SSz6Hv7a/iU74RF84e0HwIpeWj qUVifyyQGkTxjwt47a+f7SYzQqdYOluWfh+FGjivpkopBBTkPvZS48mVCQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIEbe6d9LuGocsBJ7ARp53KehIzBMB8GA1UdIwQY MBaAFDdOJymxc2mJChUS9kPNCOS6L/QUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTjA0bktiRnphWWtLRlJMMlE4MEk1TG92OUJRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OC85NTIyMzAtYzI2Mi00MWNjLWI5NTYt Y2ZjNDZhNzZlYzc4LzEvTjA0bktiRnphWWtLRlJMMlE4MEk1TG92OUJRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81OC85NTIyMzAtYzI2Mi00MWNjLWI5NTYtY2ZjNDZhNzZlYzc4 LzEvTjA0bktiRnphWWtLRlJMMlE4MEk1TG92OUJRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfRdwieUy EKhNonmYIp6h1tVM5vebkbF98SrjlcLnuiRVT9dijtahJZypbcsZGrwSevRCtlfd 0o0q/vlsAoJ41LZfiBPcxVGaqKFQbXXfskMQiLWKKOSNMwyMO17GVE0IqvShPatW hlca34SzKFG7a3/FilzYLXqzloviiwnhAXJYaAI2P5tOXnG06cfWqHdY/KeYmXoB R5qpe5AMitIZi+lbBr2h0eioLOC7dEz0yazPdsBJYm/jeBs4mkK0sqycfV4bSr85 simn/j+nZ6B36GFUl/VefuVvxQz3i5vs7daOmIHDmzKqztwO2XmsCkKTA7Lw2N77 rMWHUVK0ORKhdQ== -----END CERTIFICATE-----Generated at Mon Sep 28 19:24:19 2026 by rpki-client