$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/18/260b61-a348-4d47-92f6-1e0e8b909e34/1/nlUyAHdpaUSxYTwujJxgah4G63k.mft File: nlUyAHdpaUSxYTwujJxgah4G63k.mft (raw, json) Hash identifier: TIbgAnmwKSQkJDsEmNYLXj2YeuxnaImhYvPxvH6CQyA= Subject key identifier: E3:A6:8C:C5:85:5B:B5:4B:5E:85:05:AA:F1:4E:89:9F:B3:D7:2B:DB Authority key identifier: 9E:55:32:00:77:69:69:44:B1:61:3C:2E:8C:9C:60:6A:1E:06:EB:79 Certificate issuer: /CN=9e55320077696944b1613c2e8c9c606a1e06eb79 Certificate serial: 01A12AD72A59166406AEA95FF02C33876445 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nlUyAHdpaUSxYTwujJxgah4G63k.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/260b61-a348-4d47-92f6-1e0e8b909e34/1/nlUyAHdpaUSxYTwujJxgah4G63k.mft Manifest number: 1ABB Signing time: Sun 11 Oct 2026 12:01:46 +0000 Manifest this update: Sun 11 Oct 2026 12:01:46 +0000 Manifest next update: Mon 12 Oct 2026 12:01:46 +0000 Files and hashes: 1: 8Eblc7pa_4U4okyHLfqfcyfnWz0.roa (hash: yDyQhyWU2Yy6CbJb1KU7PdxVdmn9PLwPpcooL0C53mY=) 2: AyLKfRccIqVZSZfeJQ1-KG_YPTU.asa (hash: utC08LUwBVA4cVQBYh5JTq1FqYPeFvwHosHL7fDW+sI=) 3: HvJf-bfTg2tiYUvSB0Kj9WjrWi0.roa (hash: Zj79TOXiKACE8B8W/OUq9I83R0d9i1y3XLh2/Gqubpw=) 4: W-sALm5q0yq3QnzfCn9zqwJqvaA.roa (hash: xnIdiawY8eAQvPvkfIlMj6UoPw+J3dJ14IvwIdndhxo=) 5: WDscPdpfG-kb__QIc1556x7o_PY.roa (hash: l96y3WYtqpU/N9iNr6T/BhsvK6KFKMEJ/k50G6U6KZ4=) 6: dDBO-S6Wp6dejnuaBq43TxSUg-A.roa (hash: 4J4YToYV6H1+Y7Dnf4EOV1eYe0uHDGZBia2zslZYn1Y=) 7: emE3k5mpGo837IHnxMhWq1ufD6w.asa (hash: BWnROOAQXj4iBe5c9BYzHZA2Z+H659fm2Nrz/OItGO0=) 8: f9p5fANR3rgdNF9ibKB-GDcgYp0.asa (hash: qcx5yEHomaJVsdDB+zzIUqbgqwQXu1Ph9bsEC6CL9SQ=) 9: nlUyAHdpaUSxYTwujJxgah4G63k.crl (hash: qOlx3E5jWsfoewKEnztwLqMgArNt3kkua18l/dD7QUI=) 10: ouM5YtdgzmK88LVBLR4anX4lhhA.roa (hash: 8cSgKHpeL4CzJp24fOsiDeOOZHqLgpt9SIcrnZhqRTM=) 11: pG6KdtKifWBBYo7DL8JxMRs-nM0.roa (hash: gKlmdKh10IDFHdiA03gsTAC30YiWDq57ljKUq/ouYK0=) 12: qvhCmUDzNKL8cJBghrHddfWvkhk.roa (hash: UnviboD1YkVxbTanetQc6UpYBMCuKxxYl0kVwOj2pxE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/260b61-a348-4d47-92f6-1e0e8b909e34/1/nlUyAHdpaUSxYTwujJxgah4G63k.crl rsync://rpki.ripe.net/repository/DEFAULT/18/260b61-a348-4d47-92f6-1e0e8b909e34/1/nlUyAHdpaUSxYTwujJxgah4G63k.mft rsync://rpki.ripe.net/repository/DEFAULT/nlUyAHdpaUSxYTwujJxgah4G63k.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 12 Oct 2026 12:01:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a1:2a:d7:2a:59:16:64:06:ae:a9:5f:f0:2c:33:87:64:45 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9e55320077696944b1613c2e8c9c606a1e06eb79 Validity Not Before: Oct 11 12:01:46 2026 GMT Not After : Oct 12 12:01:46 2026 GMT Subject: CN=e3a68cc5855bb54b5e8505aaf14e899fb3d72bdb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:17:be:c4:61:33:f0:f4:5e:1f:1d:76:0f:3a: ee:c0:db:ba:7b:6a:17:04:21:38:3a:11:be:7e:7c: 5a:98:63:c1:ae:ed:8c:c0:6f:03:64:16:3a:34:a2: f7:ec:10:fe:e1:28:3e:10:05:a4:96:f4:bd:05:e0: e6:da:b0:39:7c:87:c2:de:75:c0:cd:3d:08:be:b3: 94:e9:7b:75:10:6b:43:24:5c:f3:a3:83:50:0d:59: db:d8:7f:de:a6:cb:e5:ca:bb:72:f3:e9:52:9a:ea: 9c:08:59:a7:9f:d4:0f:b2:1c:00:f9:b0:b6:9a:b0: c7:09:e3:a1:5b:42:39:4c:4c:02:e3:63:24:e5:41: 4c:7b:37:9d:24:59:44:87:33:8f:5c:e4:4a:70:82: 46:f1:0a:9a:91:53:82:d7:e5:8d:b5:a5:30:e1:e8: 78:5b:87:f5:a1:b7:c5:f7:2e:72:cb:74:28:e2:53: a3:e7:18:6a:17:cc:38:57:2d:5d:0b:bd:2d:09:85: b4:83:af:5a:34:b6:22:98:ee:56:52:e5:3c:f0:67: a2:a8:f0:0f:13:29:c1:14:18:82:5c:46:4a:35:56: 02:58:44:73:03:77:53:d5:ef:3d:0a:55:16:1d:6e: 81:8f:af:53:dd:a3:b4:d9:e8:b5:40:a7:36:e7:5d: 09:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:A6:8C:C5:85:5B:B5:4B:5E:85:05:AA:F1:4E:89:9F:B3:D7:2B:DB X509v3 Authority Key Identifier: keyid:9E:55:32:00:77:69:69:44:B1:61:3C:2E:8C:9C:60:6A:1E:06:EB:79 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nlUyAHdpaUSxYTwujJxgah4G63k.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/260b61-a348-4d47-92f6-1e0e8b909e34/1/nlUyAHdpaUSxYTwujJxgah4G63k.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/18/260b61-a348-4d47-92f6-1e0e8b909e34/1/nlUyAHdpaUSxYTwujJxgah4G63k.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1c:61:04:49:2e:73:ad:45:31:79:a3:a9:a8:fe:ad:80:f9:d1: 1b:48:e6:80:d5:1f:68:53:bc:cb:39:e1:fd:ea:e2:73:a4:87: a6:be:fe:f4:51:d7:7e:e9:07:02:36:8a:1a:65:fe:15:43:e2: 5e:a0:ab:eb:bf:71:d1:0a:92:52:c3:17:c5:ee:7f:68:4b:b3: 13:73:b8:ca:00:5c:94:af:08:1b:d9:0d:a0:47:5f:b1:ba:5c: 6f:bb:cc:56:dc:3e:d0:e4:28:38:14:92:4f:4e:74:2d:d0:47: a2:7e:31:64:77:8b:0f:da:ab:3f:a1:dd:04:30:9f:a9:98:85: 85:87:7d:dc:f0:5d:b3:9d:f8:b4:15:e3:27:00:7b:9e:75:d7: c6:eb:81:04:67:46:4c:44:2b:6d:15:62:8a:72:c3:00:bb:72: e1:0a:bb:0a:e5:17:bc:17:d5:90:0c:40:ef:a1:eb:5f:20:ff: e4:b8:6d:c0:98:2b:e1:3b:82:f8:d4:71:0a:b8:86:a6:43:93: b7:74:75:67:b1:cc:99:74:51:23:88:1f:92:eb:0c:d9:47:ca: 5b:5a:ed:09:02:e5:8d:4e:e8:f8:18:58:01:22:c6:c0:7c:5f: d5:7c:99:cd:ac:4f:13:fe:6c:21:5b:cf:ed:dc:05:39:e0:ed: 9e:e8:bf:ab -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaEq1ypZFmQGrqlf8Cwzh2RFMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDllNTUzMjAwNzc2OTY5NDRiMTYxM2MyZThjOWM2MDZhMWUw NmViNzkwHhcNMjYxMDExMTIwMTQ2WhcNMjYxMDEyMTIwMTQ2WjAzMTEwLwYDVQQD EyhlM2E2OGNjNTg1NWJiNTRiNWU4NTA1YWFmMTRlODk5ZmIzZDcyYmRiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAthe+xGEz8PReHx12DzruwNu6e2oX BCE4OhG+fnxamGPBru2MwG8DZBY6NKL37BD+4Sg+EAWklvS9BeDm2rA5fIfC3nXA zT0IvrOU6Xt1EGtDJFzzo4NQDVnb2H/epsvlyrty8+lSmuqcCFmnn9QPshwA+bC2 mrDHCeOhW0I5TEwC42Mk5UFMezedJFlEhzOPXORKcIJG8QqakVOC1+WNtaUw4eh4 W4f1obfF9y5yy3Qo4lOj5xhqF8w4Vy1dC70tCYW0g69aNLYimO5WUuU88GeiqPAP EynBFBiCXEZKNVYCWERzA3dT1e89ClUWHW6Bj69T3aO02ei1QKc2510J9wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOOmjMWFW7VLXoUFqvFOiZ+z1yvbMB8GA1UdIwQY MBaAFJ5VMgB3aWlEsWE8LoycYGoeBut5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbmxVeUFIZHBhVVN4WVR3dWpKeGdhaDRHNjNrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOC8yNjBiNjEtYTM0OC00ZDQ3LTkyZjYt MWUwZThiOTA5ZTM0LzEvbmxVeUFIZHBhVVN4WVR3dWpKeGdhaDRHNjNrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xOC8yNjBiNjEtYTM0OC00ZDQ3LTkyZjYtMWUwZThiOTA5ZTM0 LzEvbmxVeUFIZHBhVVN4WVR3dWpKeGdhaDRHNjNrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHGEESS5z rUUxeaOpqP6tgPnRG0jmgNUfaFO8yznh/eric6SHpr7+9FHXfukHAjaKGmX+FUPi XqCr679x0QqSUsMXxe5/aEuzE3O4ygBclK8IG9kNoEdfsbpcb7vMVtw+0OQoOBSS T050LdBHon4xZHeLD9qrP6HdBDCfqZiFhYd93PBds534tBXjJwB7nnXXxuuBBGdG TEQrbRViinLDALty4Qq7CuUXvBfVkAxA76HrXyD/5LhtwJgr4TuC+NRxCriGpkOT t3R1Z7HMmXRRI4gfkusM2UfKW1rtCQLljU7o+BhYASLGwHxf1XyZzaxPE/5sIVvP 7dwFOeDtnui/qw== -----END CERTIFICATE-----Generated at Sun Oct 11 22:05:09 2026 by rpki-client