$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/952230-c262-41cc-b956-cfc46a76ec78/1/N04nKbFzaYkKFRL2Q80I5Lov9BQ.mft File: N04nKbFzaYkKFRL2Q80I5Lov9BQ.mft (raw, json) Hash identifier: ajzK7g+eNwtr2cPfRnZ88Q5X8xnTbGb8c4lSnJgqE9o= Subject key identifier: B5:AE:31:8B:99:24:79:3E:A7:8B:B8:27:6F:BD:43:E5:F6:4F:28:6A Authority key identifier: 37:4E:27:29:B1:73:69:89:0A:15:12:F6:43:CD:08:E4:BA:2F:F4:14 Certificate issuer: /CN=374e2729b17369890a1512f643cd08e4ba2ff414 Certificate serial: 019CA90F138DD571D34BE62C7C1F59744D8E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/N04nKbFzaYkKFRL2Q80I5Lov9BQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/952230-c262-41cc-b956-cfc46a76ec78/1/N04nKbFzaYkKFRL2Q80I5Lov9BQ.mft Manifest number: 10C2 Signing time: Sun 01 Mar 2026 11:01:03 +0000 Manifest this update: Sun 01 Mar 2026 11:01:03 +0000 Manifest next update: Mon 02 Mar 2026 11:01:03 +0000 Files and hashes: 1: 9L3_BjUt_Pkd4lNYNY4IEdG62Oo.roa (hash: vOAxZY4XkVH9qyzLfhiBzlAaImKBkCi4da5tiiu6/bw=) 2: N04nKbFzaYkKFRL2Q80I5Lov9BQ.crl (hash: 1ZwrhfugXqlHDpmtRgPyL7+XF+ujoBDCwnA3U5VE4yo=) 3: T6tjope32KekAaANH2cDVM3Bd9k.roa (hash: 9xa2u1KnWt12GiywGNOlfGRCJPP0+ZYG6OMmHhnqVtY=) 4: UikTrUC-2DsDHw5Izq7A013vsK4.roa (hash: WWeo5jlTxNVbDlt52GNnE81h3OK/EnTtfPjD3xyIbrg=) 5: bxYbt9Cn4R10yajjbMPCKKg_YHc.roa (hash: 8byOzQfwF/KOVbj8pNAWquwbx3xGB2NYpi6Uf3icLsA=) 6: hZiFcW7h5F5XfcXkHDMH450e4sg.roa (hash: D2HtChe92Pq7COg3X4YoKzG61XVo1IcROxs8V7eIHbE=) 7: k-eSrqeXL71w-nhYF8XhonC5sgE.roa (hash: pMZO0gbnwiTypIUzIs1wrF7zpRP+hjOJxinJEWPhOb8=) 8: k1QjV3pgzlwvmbzPzUX7R2KWHvc.roa (hash: wEZygrh3ZXDp7V3oFcFdmkvylWDdJbyp7T5ic216Yzg=) 9: nV6x1ARqVoKhDBvVitzUNib3WX8.roa (hash: 4la/SYuIQD/3eli4W4FOUYyY4QVHr6ZjIk4P9pj+v4o=) 10: rnlQK5dhYROPwVOz0gIHy2hThyA.roa (hash: ePpSMaFTViP+SRbpfZ7RDlUyIWzyjKKxE4TEHxPptd8=) 11: s0LJxcrA6NEOVotU612Fnf2S5ek.roa (hash: I+fPBNeq55OXeCUKgKO9o96f3LbnL4TA94Ayj0fCu0c=) 12: sdcPQ034WzV8-mwdtcJH6aVjl9c.roa (hash: zgRjTN+TOMTbzC05YvDtYP4QKYhF7SxR32E0NAVGTrk=) 13: tbcmmXBw3ZIYzwt4SULlG4fEW4c.roa (hash: 1XrkcGJtOYvvhy1+G9sGbL7q4EKrPWSn1X+QN9f+LUQ=) 14: uKuuYWmjqM2xupAEXFGSa3h-MaE.roa (hash: FAvKw/d08SYAWcoVLx+8l9dFyUcn/GaKHVNcCMbJaSs=) 15: vL7Zi_26wPMgcv7NcmYQVrG89-Y.roa (hash: rnnb+NddXrEWMTYiz1zv6rkvP1op88gCRHr3DNzUUbI=) 16: vxGSClUEKdIXCUT1_00M4kOwUk0.roa (hash: i237stsz2i1XaEU/WNLhg4As1B9TcbIPHRPFCYv5Hu0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/952230-c262-41cc-b956-cfc46a76ec78/1/N04nKbFzaYkKFRL2Q80I5Lov9BQ.crl rsync://rpki.ripe.net/repository/DEFAULT/58/952230-c262-41cc-b956-cfc46a76ec78/1/N04nKbFzaYkKFRL2Q80I5Lov9BQ.mft rsync://rpki.ripe.net/repository/DEFAULT/N04nKbFzaYkKFRL2Q80I5Lov9BQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 02 Mar 2026 06:00:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:a9:0f:13:8d:d5:71:d3:4b:e6:2c:7c:1f:59:74:4d:8e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=374e2729b17369890a1512f643cd08e4ba2ff414 Validity Not Before: Mar 1 11:01:03 2026 GMT Not After : Mar 2 11:01:03 2026 GMT Subject: CN=b5ae318b9924793ea78bb8276fbd43e5f64f286a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:2e:44:d0:69:b8:b4:2e:e6:36:b5:95:20:ef: df:11:8d:4a:5d:e1:ce:d5:47:d7:56:da:30:14:e1: 52:93:2d:60:32:e3:14:26:28:5a:d5:83:22:c9:06: 89:eb:88:2b:1b:0c:be:43:99:5a:cf:cd:9e:ac:b2: c3:57:e5:84:fb:76:9f:7e:a5:f6:ef:02:e5:2c:1c: 3d:60:bc:a7:65:4b:a7:32:40:c1:ca:84:95:4a:3a: c9:46:99:a9:75:f5:b3:44:44:0f:af:bc:57:0e:e6: 26:f7:79:6e:3c:2c:bf:a0:2c:35:12:da:d0:8f:81: 65:87:fb:ea:5a:4f:1e:b3:e1:41:b9:cd:b4:8a:9a: 43:f3:1c:08:9e:63:76:df:4c:37:63:e2:19:2d:ba: b1:fe:28:9e:c2:28:e8:49:7a:42:89:7d:e9:6d:2d: d9:1d:12:9e:cb:38:44:c8:c7:42:30:a1:be:70:98: ad:4a:0a:74:bd:5a:1a:59:55:e8:da:95:bb:8e:86: 8b:0f:8f:15:a6:3c:be:c8:34:26:c9:4a:1a:0c:ac: d5:5a:4d:56:df:5b:ba:44:db:93:08:de:1b:66:ea: 2f:f0:95:e2:86:c2:c2:25:3c:a6:ba:f7:3e:51:22: a0:53:6c:8f:fc:54:2b:89:e8:83:a0:12:6f:66:2e: f6:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:AE:31:8B:99:24:79:3E:A7:8B:B8:27:6F:BD:43:E5:F6:4F:28:6A X509v3 Authority Key Identifier: keyid:37:4E:27:29:B1:73:69:89:0A:15:12:F6:43:CD:08:E4:BA:2F:F4:14 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N04nKbFzaYkKFRL2Q80I5Lov9BQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/952230-c262-41cc-b956-cfc46a76ec78/1/N04nKbFzaYkKFRL2Q80I5Lov9BQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/58/952230-c262-41cc-b956-cfc46a76ec78/1/N04nKbFzaYkKFRL2Q80I5Lov9BQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 06:3d:ec:9a:e0:1f:87:ba:3e:eb:29:15:40:f0:a1:85:e6:ba: ea:20:ae:5c:68:86:aa:f7:80:76:df:cf:c7:05:85:14:1d:27: 97:5f:2e:7c:fd:a0:ce:d4:f4:21:56:8e:54:3b:61:c7:eb:8b: 0e:c3:31:19:1b:6d:b0:44:0d:10:10:bc:b1:a1:56:4b:28:65: 76:c4:f4:61:95:dd:a8:28:65:56:db:ca:fc:d1:9b:a7:6b:7a: 87:73:fe:da:54:44:fa:b8:72:6a:04:d6:0e:7c:46:95:76:b2: 97:0d:19:a0:d5:25:59:e1:10:82:14:3a:43:5e:c2:ab:6b:66: 5c:86:a2:7f:6f:6f:56:d0:4c:50:bb:b7:fe:f0:da:b0:92:fe: b5:6d:ef:bc:a3:56:2e:4d:1c:64:4d:ba:bc:d7:9c:28:6e:b3: 68:fb:86:b9:27:d5:16:9b:60:1e:5b:b0:ef:2c:67:a4:bb:f9: 90:00:02:69:81:48:73:81:f6:eb:c8:e5:90:ea:9d:53:bc:dd: e1:0f:42:eb:35:fa:14:e8:d4:2c:79:07:5e:c1:5e:04:22:47: 8b:c2:77:4f:02:c8:cc:7e:f7:e6:5a:6f:f5:b6:04:0d:3c:48: a5:a2:2e:4a:5a:ee:70:02:4d:80:09:08:68:2c:35:5d:e2:b5: db:ae:86:b7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZypDxON1XHTS+YsfB9ZdE2OMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM3NGUyNzI5YjE3MzY5ODkwYTE1MTJmNjQzY2QwOGU0YmEy ZmY0MTQwHhcNMjYwMzAxMTEwMTAzWhcNMjYwMzAyMTEwMTAzWjAzMTEwLwYDVQQD EyhiNWFlMzE4Yjk5MjQ3OTNlYTc4YmI4Mjc2ZmJkNDNlNWY2NGYyODZhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsi5E0Gm4tC7mNrWVIO/fEY1KXeHO 1UfXVtowFOFSky1gMuMUJiha1YMiyQaJ64grGwy+Q5laz82erLLDV+WE+3affqX2 7wLlLBw9YLynZUunMkDByoSVSjrJRpmpdfWzREQPr7xXDuYm93luPCy/oCw1EtrQ j4Flh/vqWk8es+FBuc20ippD8xwInmN230w3Y+IZLbqx/iiewijoSXpCiX3pbS3Z HRKeyzhEyMdCMKG+cJitSgp0vVoaWVXo2pW7joaLD48Vpjy+yDQmyUoaDKzVWk1W 31u6RNuTCN4bZuov8JXihsLCJTymuvc+USKgU2yP/FQrieiDoBJvZi72mQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLWuMYuZJHk+p4u4J2+9Q+X2TyhqMB8GA1UdIwQY MBaAFDdOJymxc2mJChUS9kPNCOS6L/QUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTjA0bktiRnphWWtLRlJMMlE4MEk1TG92OUJRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OC85NTIyMzAtYzI2Mi00MWNjLWI5NTYt Y2ZjNDZhNzZlYzc4LzEvTjA0bktiRnphWWtLRlJMMlE4MEk1TG92OUJRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81OC85NTIyMzAtYzI2Mi00MWNjLWI5NTYtY2ZjNDZhNzZlYzc4 LzEvTjA0bktiRnphWWtLRlJMMlE4MEk1TG92OUJRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABj3smuAf h7o+6ykVQPChhea66iCuXGiGqveAdt/PxwWFFB0nl18ufP2gztT0IVaOVDthx+uL DsMxGRttsEQNEBC8saFWSyhldsT0YZXdqChlVtvK/NGbp2t6h3P+2lRE+rhyagTW DnxGlXaylw0ZoNUlWeEQghQ6Q17Cq2tmXIaif29vVtBMULu3/vDasJL+tW3vvKNW Lk0cZE26vNecKG6zaPuGuSfVFptgHluw7yxnpLv5kAACaYFIc4H268jlkOqdU7zd 4Q9C6zX6FOjULHkHXsFeBCJHi8J3TwLIzH735lpv9bYEDTxIpaIuSlrucAJNgAkI aCw1XeK1266Gtw== -----END CERTIFICATE-----Generated at Sun Mar 1 16:30:25 2026 by rpki-client