$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/952230-c262-41cc-b956-cfc46a76ec78/1/N04nKbFzaYkKFRL2Q80I5Lov9BQ.mft File: N04nKbFzaYkKFRL2Q80I5Lov9BQ.mft (raw, json) Hash identifier: FGE04Qw3hY8WPZ13UkG141oDJB0OEguqqVzwTJdc3cc= Subject key identifier: AB:79:6A:4A:F1:07:B6:4B:8F:4E:63:5E:FE:C2:45:89:B0:E4:9A:47 Authority key identifier: 37:4E:27:29:B1:73:69:89:0A:15:12:F6:43:CD:08:E4:BA:2F:F4:14 Certificate issuer: /CN=374e2729b17369890a1512f643cd08e4ba2ff414 Certificate serial: 019EC06DBA72AE8BA5F07AB565624341D73F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/N04nKbFzaYkKFRL2Q80I5Lov9BQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/952230-c262-41cc-b956-cfc46a76ec78/1/N04nKbFzaYkKFRL2Q80I5Lov9BQ.mft Manifest number: 11D9 Signing time: Sat 13 Jun 2026 10:01:17 +0000 Manifest this update: Sat 13 Jun 2026 10:01:17 +0000 Manifest next update: Sun 14 Jun 2026 10:01:17 +0000 Files and hashes: 1: 9L3_BjUt_Pkd4lNYNY4IEdG62Oo.roa (hash: vOAxZY4XkVH9qyzLfhiBzlAaImKBkCi4da5tiiu6/bw=) 2: N04nKbFzaYkKFRL2Q80I5Lov9BQ.crl (hash: 4gs/4UWAIJHfTuILLOWV+Q7LUG0lQCZ6eHly/WDT3e8=) 3: T5TKjlAxIgi5sdeYoenLah7GnlY.roa (hash: NpGInzDZVPNjYivC1m6sc5I/so2WF3w3NWCciifigO8=) 4: T6tjope32KekAaANH2cDVM3Bd9k.roa (hash: 9xa2u1KnWt12GiywGNOlfGRCJPP0+ZYG6OMmHhnqVtY=) 5: UikTrUC-2DsDHw5Izq7A013vsK4.roa (hash: WWeo5jlTxNVbDlt52GNnE81h3OK/EnTtfPjD3xyIbrg=) 6: bxYbt9Cn4R10yajjbMPCKKg_YHc.roa (hash: 8byOzQfwF/KOVbj8pNAWquwbx3xGB2NYpi6Uf3icLsA=) 7: gsyHDTvDlBa-a40MXp20PVO09Co.roa (hash: 5C4vpTeb+IFoiSfHdto5LBRKgr/ild5E9ccV5XfEhYU=) 8: hZiFcW7h5F5XfcXkHDMH450e4sg.roa (hash: D2HtChe92Pq7COg3X4YoKzG61XVo1IcROxs8V7eIHbE=) 9: k-eSrqeXL71w-nhYF8XhonC5sgE.roa (hash: pMZO0gbnwiTypIUzIs1wrF7zpRP+hjOJxinJEWPhOb8=) 10: k1QjV3pgzlwvmbzPzUX7R2KWHvc.roa (hash: wEZygrh3ZXDp7V3oFcFdmkvylWDdJbyp7T5ic216Yzg=) 11: rnlQK5dhYROPwVOz0gIHy2hThyA.roa (hash: ePpSMaFTViP+SRbpfZ7RDlUyIWzyjKKxE4TEHxPptd8=) 12: s0LJxcrA6NEOVotU612Fnf2S5ek.roa (hash: I+fPBNeq55OXeCUKgKO9o96f3LbnL4TA94Ayj0fCu0c=) 13: sdcPQ034WzV8-mwdtcJH6aVjl9c.roa (hash: zgRjTN+TOMTbzC05YvDtYP4QKYhF7SxR32E0NAVGTrk=) 14: tbcmmXBw3ZIYzwt4SULlG4fEW4c.roa (hash: 1XrkcGJtOYvvhy1+G9sGbL7q4EKrPWSn1X+QN9f+LUQ=) 15: uKuuYWmjqM2xupAEXFGSa3h-MaE.roa (hash: FAvKw/d08SYAWcoVLx+8l9dFyUcn/GaKHVNcCMbJaSs=) 16: vL7Zi_26wPMgcv7NcmYQVrG89-Y.roa (hash: rnnb+NddXrEWMTYiz1zv6rkvP1op88gCRHr3DNzUUbI=) 17: vxGSClUEKdIXCUT1_00M4kOwUk0.roa (hash: i237stsz2i1XaEU/WNLhg4As1B9TcbIPHRPFCYv5Hu0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/952230-c262-41cc-b956-cfc46a76ec78/1/N04nKbFzaYkKFRL2Q80I5Lov9BQ.crl rsync://rpki.ripe.net/repository/DEFAULT/58/952230-c262-41cc-b956-cfc46a76ec78/1/N04nKbFzaYkKFRL2Q80I5Lov9BQ.mft rsync://rpki.ripe.net/repository/DEFAULT/N04nKbFzaYkKFRL2Q80I5Lov9BQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 14 Jun 2026 10:00:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9e:c0:6d:ba:72:ae:8b:a5:f0:7a:b5:65:62:43:41:d7:3f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=374e2729b17369890a1512f643cd08e4ba2ff414 Validity Not Before: Jun 13 10:01:17 2026 GMT Not After : Jun 14 10:01:17 2026 GMT Subject: CN=ab796a4af107b64b8f4e635efec24589b0e49a47 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:79:68:66:61:90:b5:45:8b:08:ea:89:b3:77: 84:18:68:aa:29:35:c2:5c:5e:19:d0:33:cb:04:b9: f4:99:0d:1c:51:f2:6e:80:9c:24:2d:b8:22:e9:5c: 21:9e:9b:ee:f0:4a:92:f3:80:38:6c:53:04:23:08: f8:41:dc:ee:7f:a4:72:44:30:c9:e9:00:b4:ea:1b: 01:73:55:f6:e4:8c:a4:2d:8d:7d:f5:19:74:f2:74: 77:ee:05:52:3e:7d:13:1b:d0:85:e6:11:8d:d3:32: 0e:0e:79:9b:59:f4:21:e4:0e:b3:9f:76:56:d1:a2: f8:17:80:72:54:dd:db:6c:61:ab:94:71:30:77:98: 1d:f9:5b:55:5f:af:63:ae:e9:0d:5e:58:59:aa:62: 88:43:a4:d8:47:ba:ee:4f:2f:ee:b6:86:9f:b3:b4: b0:c8:ff:3a:24:52:cf:50:47:17:6f:97:95:a7:10: c1:75:8e:8d:a9:d9:ee:62:6c:c7:b5:95:10:07:89: 3d:b4:86:82:ed:20:42:e4:9d:7c:73:d5:48:97:c7: 13:42:d1:bd:32:d7:f2:b0:d7:44:95:42:f3:a2:7f: fd:8e:f7:db:3f:5b:cb:83:de:f9:fc:63:9f:2e:c7: 49:e0:df:2a:ba:19:96:88:5b:13:cf:1d:90:c5:ec: 2b:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:79:6A:4A:F1:07:B6:4B:8F:4E:63:5E:FE:C2:45:89:B0:E4:9A:47 X509v3 Authority Key Identifier: keyid:37:4E:27:29:B1:73:69:89:0A:15:12:F6:43:CD:08:E4:BA:2F:F4:14 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N04nKbFzaYkKFRL2Q80I5Lov9BQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/952230-c262-41cc-b956-cfc46a76ec78/1/N04nKbFzaYkKFRL2Q80I5Lov9BQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/58/952230-c262-41cc-b956-cfc46a76ec78/1/N04nKbFzaYkKFRL2Q80I5Lov9BQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 54:b3:f2:79:6f:07:fa:13:75:a7:71:1f:01:48:99:93:6a:32: 82:5b:ee:9b:cc:42:fa:01:ff:07:ea:1a:be:b0:12:c3:ac:68: ab:1f:d7:40:e1:ec:b4:bf:53:4f:16:da:5f:51:80:8b:3c:16: a5:72:78:1a:29:7c:8b:2d:e7:1e:af:01:ba:01:be:a4:9f:f8: ee:b0:5f:0d:d9:7c:74:39:e9:5c:eb:99:e4:f4:7f:10:36:b0: 41:58:fe:fd:46:13:34:e3:eb:26:3b:d0:30:58:94:58:96:4e: 40:5b:ed:5d:44:bf:09:09:4d:ef:36:92:d6:c8:9d:31:14:dc: 1b:25:45:0e:0d:23:84:9a:ec:5c:cc:0e:31:c0:50:00:ed:bd: fe:18:45:cf:78:1e:33:ca:8c:27:97:fa:58:28:e8:84:9e:44: 48:e6:1f:ce:94:15:9c:4f:b4:9f:88:94:69:30:6b:77:30:d5: 25:ca:39:24:0a:f5:63:e3:7d:a7:39:12:6a:a0:bf:d3:46:11: ac:c8:98:ab:57:10:b9:ac:21:47:e8:e2:39:40:ac:65:29:ab: 7c:23:55:2b:b2:c7:c3:2e:a4:11:82:ca:4f:b4:74:ad:7f:a2: 17:38:88:74:c6:92:30:9e:ea:7a:73:40:e7:34:c9:e8:ed:65: c7:1e:5f:5e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ7Abbpyroul8Hq1ZWJDQdc/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM3NGUyNzI5YjE3MzY5ODkwYTE1MTJmNjQzY2QwOGU0YmEy ZmY0MTQwHhcNMjYwNjEzMTAwMTE3WhcNMjYwNjE0MTAwMTE3WjAzMTEwLwYDVQQD EyhhYjc5NmE0YWYxMDdiNjRiOGY0ZTYzNWVmZWMyNDU4OWIwZTQ5YTQ3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo3loZmGQtUWLCOqJs3eEGGiqKTXC XF4Z0DPLBLn0mQ0cUfJugJwkLbgi6Vwhnpvu8EqS84A4bFMEIwj4Qdzuf6RyRDDJ 6QC06hsBc1X25IykLY199Rl08nR37gVSPn0TG9CF5hGN0zIODnmbWfQh5A6zn3ZW 0aL4F4ByVN3bbGGrlHEwd5gd+VtVX69jrukNXlhZqmKIQ6TYR7ruTy/utoafs7Sw yP86JFLPUEcXb5eVpxDBdY6NqdnuYmzHtZUQB4k9tIaC7SBC5J18c9VIl8cTQtG9 MtfysNdElULzon/9jvfbP1vLg975/GOfLsdJ4N8quhmWiFsTzx2Qxewr0QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKt5akrxB7ZLj05jXv7CRYmw5JpHMB8GA1UdIwQY MBaAFDdOJymxc2mJChUS9kPNCOS6L/QUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTjA0bktiRnphWWtLRlJMMlE4MEk1TG92OUJRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OC85NTIyMzAtYzI2Mi00MWNjLWI5NTYt Y2ZjNDZhNzZlYzc4LzEvTjA0bktiRnphWWtLRlJMMlE4MEk1TG92OUJRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81OC85NTIyMzAtYzI2Mi00MWNjLWI5NTYtY2ZjNDZhNzZlYzc4 LzEvTjA0bktiRnphWWtLRlJMMlE4MEk1TG92OUJRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVLPyeW8H +hN1p3EfAUiZk2oyglvum8xC+gH/B+oavrASw6xoqx/XQOHstL9TTxbaX1GAizwW pXJ4Gil8iy3nHq8BugG+pJ/47rBfDdl8dDnpXOuZ5PR/EDawQVj+/UYTNOPrJjvQ MFiUWJZOQFvtXUS/CQlN7zaS1sidMRTcGyVFDg0jhJrsXMwOMcBQAO29/hhFz3ge M8qMJ5f6WCjohJ5ESOYfzpQVnE+0n4iUaTBrdzDVJco5JAr1Y+N9pzkSaqC/00YR rMiYq1cQuawhR+jiOUCsZSmrfCNVK7LHwy6kEYLKT7R0rX+iFziIdMaSMJ7qenNA 5zTJ6O1lxx5fXg== -----END CERTIFICATE-----Generated at Sat Jun 13 19:49:00 2026 by rpki-client