$ rpki-client -vvf rpki.nellicus.net/repo/nellicus/1/4E9A6C18F349B395C31C33BB7F9B9F5817BDE9A8.mft File: 4E9A6C18F349B395C31C33BB7F9B9F5817BDE9A8.mft (raw, json) Hash identifier: IrbcO+EbIFImIKw9kYCPNmWF6WjuMCHWZcHsDq5vEAk= Subject key identifier: AF:12:F5:E7:EC:42:06:E2:F4:1F:B5:F2:43:D2:DF:47:33:79:BE:FA Authority key identifier: 4E:9A:6C:18:F3:49:B3:95:C3:1C:33:BB:7F:9B:9F:58:17:BD:E9:A8 Certificate issuer: /CN=4e9a6c18f349b395c31c33bb7f9b9f5817bde9a8 Certificate serial: 762ED33F331AEE86DA7FCB05291E27C4B009B98E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TppsGPNJs5XDHDO7f5ufWBe96ag.cer Subject info access: rsync://rpki.nellicus.net/repo/nellicus/1/4E9A6C18F349B395C31C33BB7F9B9F5817BDE9A8.mft Manifest number: 028A Signing time: Thu 16 Apr 2026 22:36:37 +0000 Manifest this update: Thu 16 Apr 2026 22:31:37 +0000 Manifest next update: Sat 18 Apr 2026 01:04:37 +0000 Files and hashes: 1: 3138352e3230342e31342e302f32332d3234203d3e20323033393339.roa (hash: JQwkT1z8uimpbN2Jt8jPn0T3yATPeIOHsQosuzjWZdg=) 2: 326130613a663034303a3a2f32392d3239203d3e203631393631.roa (hash: q7WGQJ75bRybHehoGPB487LwawVW780GrlEzs+BTdx4=) 3: 323030313a3637383a3565343a3a2f34382d3438203d3e20323034303132.roa (hash: fxsQm1q2pmZhASyGNHE1h8SCDsGuI34aljSVVL+enkQ=) 4: 4E9A6C18F349B395C31C33BB7F9B9F5817BDE9A8.crl (hash: 9GMgEI9sQcWZzJkJemT2yC8amg/v+pxSRp16cJITHgI=) 5: 3138352e3230342e31322e302f32332d3234203d3e203631393631.roa (hash: d3/k+6QX5UseLeqUWTi+l6cD1s9fc/SSlpG2TVD7AKo=) 6: 323030313a3637383a3565343a3a2f34382d3438203d3e20343031353531.roa (hash: XAuPoyWgqk/2VSGKnl/UxA3UxeQIFy53PwlvcLnn9Pc=) 7: 323030313a3637383a3565343a3a2f34382d3438203d3e203631393631.roa (hash: nbAVFkQiqft9sHl9Hh+TY61io/BSlt5tgmWs0gncRuY=) Validation: OK Signature path: rsync://rpki.nellicus.net/repo/nellicus/1/4E9A6C18F349B395C31C33BB7F9B9F5817BDE9A8.crl rsync://rpki.nellicus.net/repo/nellicus/1/4E9A6C18F349B395C31C33BB7F9B9F5817BDE9A8.mft rsync://rpki.ripe.net/repository/DEFAULT/TppsGPNJs5XDHDO7f5ufWBe96ag.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 17 Apr 2026 22:00:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 76:2e:d3:3f:33:1a:ee:86:da:7f:cb:05:29:1e:27:c4:b0:09:b9:8e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e9a6c18f349b395c31c33bb7f9b9f5817bde9a8 Validity Not Before: Apr 16 22:31:37 2026 GMT Not After : Apr 18 01:04:37 2026 GMT Subject: CN=AF12F5E7EC4206E2F41FB5F243D2DF473379BEFA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:d1:d1:68:4e:87:37:f0:60:f3:99:fb:5a:e7: 39:03:36:36:29:e3:77:20:e8:ed:60:08:5e:86:a3: 69:24:8e:41:95:2e:a2:4d:46:60:35:65:b3:c7:44: d8:b4:20:b2:fe:6b:dd:dd:1f:91:a7:d5:7b:6e:3b: 76:16:63:e4:26:87:31:6b:2e:05:08:c2:21:1b:ea: 76:2e:83:30:1d:8f:a8:be:d4:23:02:db:f7:57:f1: 46:c0:ab:e9:b7:70:89:08:16:0c:53:31:48:f4:f0: 21:78:74:c0:2c:3b:cf:71:ee:b4:5f:3c:16:21:0d: 50:97:33:5a:f4:66:64:7c:ee:bb:bc:3e:a7:34:85: be:a1:60:f2:93:af:c7:92:93:72:a8:ab:80:cd:d8: 8b:f3:84:03:9d:fc:5c:f4:c5:85:29:a5:6e:d2:96: e9:94:79:04:0e:17:e4:a7:56:b3:7b:e0:7a:56:89: b2:f9:22:84:f6:98:bd:5d:a4:c4:08:eb:fe:27:b8: 7c:68:99:59:58:07:2e:1f:89:52:6e:01:e0:eb:51: 10:cd:15:bc:17:c5:ae:71:09:96:7f:9d:cd:20:18: c7:cd:59:a9:06:04:08:e6:29:42:09:38:ef:cf:30: 8d:e3:21:7c:f8:8b:b8:7d:c9:fb:14:06:2d:69:ff: 8d:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:12:F5:E7:EC:42:06:E2:F4:1F:B5:F2:43:D2:DF:47:33:79:BE:FA X509v3 Authority Key Identifier: keyid:4E:9A:6C:18:F3:49:B3:95:C3:1C:33:BB:7F:9B:9F:58:17:BD:E9:A8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.nellicus.net/repo/nellicus/1/4E9A6C18F349B395C31C33BB7F9B9F5817BDE9A8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TppsGPNJs5XDHDO7f5ufWBe96ag.cer Subject Information Access: Signed Object - URI:rsync://rpki.nellicus.net/repo/nellicus/1/4E9A6C18F349B395C31C33BB7F9B9F5817BDE9A8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 78:19:e1:ae:73:47:69:13:fb:28:8c:b4:68:09:8f:29:18:8f: 45:49:78:ab:c5:6f:0b:38:71:de:f7:6d:80:8f:43:65:92:63: fd:a4:38:cb:20:ab:1d:ed:9d:db:0d:cc:6d:33:2e:6f:df:64: 5a:f3:cb:df:c3:ad:ed:8b:6d:ed:dc:bf:49:86:8b:dd:57:36: 48:06:0e:b0:63:57:7b:5f:cc:aa:c1:e3:cb:16:10:0b:db:93: ed:bf:d4:75:20:34:03:9b:f3:e1:e8:5c:d6:da:58:c3:19:6f: 75:0f:05:ba:e3:3a:06:3e:28:2a:13:81:ec:d1:da:4e:ec:4c: 47:04:8b:5f:e9:2f:d9:97:0c:3a:a5:1f:53:c8:23:9d:a9:0c: 1b:7e:16:c1:01:e6:bf:c5:30:18:56:17:c8:93:61:a4:91:fb: 1b:ad:ed:8b:41:d9:2a:32:46:1a:88:ce:85:ed:b6:d7:44:0f: 49:8b:7e:1a:2a:b3:94:62:dd:a7:95:d4:bf:e2:6b:99:f0:4f: 91:5e:48:69:90:33:b5:a8:96:94:e9:13:33:31:e5:d7:c5:49: 95:b3:14:ea:80:9c:da:21:af:0d:3b:2c:e1:92:04:9e:19:5c: 39:dc:90:08:38:c5:c9:fa:c6:b9:45:60:3b:4c:97:90:56:89: 1f:69:94:12 -----BEGIN CERTIFICATE----- MIIE4TCCA8mgAwIBAgIUdi7TPzMa7obaf8sFKR4nxLAJuY4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNGU5YTZjMThmMzQ5YjM5NWMzMWMzM2JiN2Y5YjlmNTgx N2JkZTlhODAeFw0yNjA0MTYyMjMxMzdaFw0yNjA0MTgwMTA0MzdaMDMxMTAvBgNV BAMTKEFGMTJGNUU3RUM0MjA2RTJGNDFGQjVGMjQzRDJERjQ3MzM3OUJFRkEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDk0dFoToc38GDzmfta5zkDNjYp 43cg6O1gCF6Go2kkjkGVLqJNRmA1ZbPHRNi0ILL+a93dH5Gn1XtuO3YWY+QmhzFr LgUIwiEb6nYugzAdj6i+1CMC2/dX8UbAq+m3cIkIFgxTMUj08CF4dMAsO89x7rRf PBYhDVCXM1r0ZmR87ru8Pqc0hb6hYPKTr8eSk3Koq4DN2IvzhAOd/Fz0xYUppW7S lumUeQQOF+SnVrN74HpWibL5IoT2mL1dpMQI6/4nuHxomVlYBy4fiVJuAeDrURDN FbwXxa5xCZZ/nc0gGMfNWakGBAjmKUIJOO/PMI3jIXz4i7h9yfsUBi1p/417AgMB AAGjggHrMIIB5zAdBgNVHQ4EFgQUrxL15+xCBuL0H7XyQ9LfRzN5vvowHwYDVR0j BBgwFoAUTppsGPNJs5XDHDO7f5ufWBe96agwDgYDVR0PAQH/BAQDAgeAMGcGA1Ud HwRgMF4wXKBaoFiGVnJzeW5jOi8vcnBraS5uZWxsaWN1cy5uZXQvcmVwby9uZWxs aWN1cy8xLzRFOUE2QzE4RjM0OUIzOTVDMzFDMzNCQjdGOUI5RjU4MTdCREU5QTgu Y3JsMGQGCCsGAQUFBwEBBFgwVjBUBggrBgEFBQcwAoZIcnN5bmM6Ly9ycGtpLnJp cGUubmV0L3JlcG9zaXRvcnkvREVGQVVMVC9UcHBzR1BOSnM1WERIRE83ZjV1ZldC ZTk2YWcuY2VyMHIGCCsGAQUFBwELBGYwZDBiBggrBgEFBQcwC4ZWcnN5bmM6Ly9y cGtpLm5lbGxpY3VzLm5ldC9yZXBvL25lbGxpY3VzLzEvNEU5QTZDMThGMzQ5QjM5 NUMzMUMzM0JCN0Y5QjlGNTgxN0JERTlBOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggr BgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsG AQUFBwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBAHgZ4a5zR2kT+yiM tGgJjykYj0VJeKvFbws4cd73bYCPQ2WSY/2kOMsgqx3tndsNzG0zLm/fZFrzy9/D re2Lbe3cv0mGi91XNkgGDrBjV3tfzKrB48sWEAvbk+2/1HUgNAOb8+HoXNbaWMMZ b3UPBbrjOgY+KCoTgezR2k7sTEcEi1/pL9mXDDqlH1PII52pDBt+FsEB5r/FMBhW F8iTYaSR+xut7YtB2SoyRhqIzoXtttdED0mLfhoqs5Ri3aeV1L/ia5nwT5FeSGmQ M7WolpTpEzMx5dfFSZWzFOqAnNohrw07LOGSBJ4ZXDnckAg4xcn6xrlFYDtMl5BW iR9plBI= -----END CERTIFICATE-----Generated at Fri Apr 17 03:22:41 2026 by rpki-client