$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/260b61-a348-4d47-92f6-1e0e8b909e34/1/nlUyAHdpaUSxYTwujJxgah4G63k.mft File: nlUyAHdpaUSxYTwujJxgah4G63k.mft (raw, json) Hash identifier: UyIQrfRQ48vOSAe5/T7KkrN7cFHS8t/3D5SCx1rD8dA= Subject key identifier: 7B:EB:10:C0:76:DF:E4:00:35:57:C6:7E:18:D4:E4:3D:00:60:A4:76 Authority key identifier: 9E:55:32:00:77:69:69:44:B1:61:3C:2E:8C:9C:60:6A:1E:06:EB:79 Certificate issuer: /CN=9e55320077696944b1613c2e8c9c606a1e06eb79 Certificate serial: 019CA946375DA643CA30D8A51612894546AA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nlUyAHdpaUSxYTwujJxgah4G63k.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/260b61-a348-4d47-92f6-1e0e8b909e34/1/nlUyAHdpaUSxYTwujJxgah4G63k.mft Manifest number: 1865 Signing time: Sun 01 Mar 2026 12:01:16 +0000 Manifest this update: Sun 01 Mar 2026 12:01:16 +0000 Manifest next update: Mon 02 Mar 2026 12:01:16 +0000 Files and hashes: 1: 8Eblc7pa_4U4okyHLfqfcyfnWz0.roa (hash: yDyQhyWU2Yy6CbJb1KU7PdxVdmn9PLwPpcooL0C53mY=) 2: AyLKfRccIqVZSZfeJQ1-KG_YPTU.asa (hash: utC08LUwBVA4cVQBYh5JTq1FqYPeFvwHosHL7fDW+sI=) 3: HvJf-bfTg2tiYUvSB0Kj9WjrWi0.roa (hash: Zj79TOXiKACE8B8W/OUq9I83R0d9i1y3XLh2/Gqubpw=) 4: W-sALm5q0yq3QnzfCn9zqwJqvaA.roa (hash: xnIdiawY8eAQvPvkfIlMj6UoPw+J3dJ14IvwIdndhxo=) 5: WDscPdpfG-kb__QIc1556x7o_PY.roa (hash: l96y3WYtqpU/N9iNr6T/BhsvK6KFKMEJ/k50G6U6KZ4=) 6: dDBO-S6Wp6dejnuaBq43TxSUg-A.roa (hash: 4J4YToYV6H1+Y7Dnf4EOV1eYe0uHDGZBia2zslZYn1Y=) 7: f9p5fANR3rgdNF9ibKB-GDcgYp0.asa (hash: qcx5yEHomaJVsdDB+zzIUqbgqwQXu1Ph9bsEC6CL9SQ=) 8: nlUyAHdpaUSxYTwujJxgah4G63k.crl (hash: an+iW9aAYRCUFhdKIJvBs6PejbrXDnvgR5NQENdBCS4=) 9: ouM5YtdgzmK88LVBLR4anX4lhhA.roa (hash: 8cSgKHpeL4CzJp24fOsiDeOOZHqLgpt9SIcrnZhqRTM=) 10: pG6KdtKifWBBYo7DL8JxMRs-nM0.roa (hash: gKlmdKh10IDFHdiA03gsTAC30YiWDq57ljKUq/ouYK0=) 11: qvhCmUDzNKL8cJBghrHddfWvkhk.roa (hash: UnviboD1YkVxbTanetQc6UpYBMCuKxxYl0kVwOj2pxE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/260b61-a348-4d47-92f6-1e0e8b909e34/1/nlUyAHdpaUSxYTwujJxgah4G63k.crl rsync://rpki.ripe.net/repository/DEFAULT/18/260b61-a348-4d47-92f6-1e0e8b909e34/1/nlUyAHdpaUSxYTwujJxgah4G63k.mft rsync://rpki.ripe.net/repository/DEFAULT/nlUyAHdpaUSxYTwujJxgah4G63k.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 02 Mar 2026 06:00:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:a9:46:37:5d:a6:43:ca:30:d8:a5:16:12:89:45:46:aa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9e55320077696944b1613c2e8c9c606a1e06eb79 Validity Not Before: Mar 1 12:01:16 2026 GMT Not After : Mar 2 12:01:16 2026 GMT Subject: CN=7beb10c076dfe4003557c67e18d4e43d0060a476 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:bd:b6:b2:79:09:86:b8:63:8c:01:01:b1:70: 4b:58:9b:a5:75:cb:7d:93:da:03:7a:11:0e:d2:73: f4:1c:b0:f0:a6:4f:85:67:99:4f:fb:54:b9:b3:ec: 99:99:79:f5:6f:f5:05:1d:7b:90:a3:5f:8b:ce:12: 2d:2c:f1:7f:a5:42:a1:d1:47:91:99:1e:67:c8:fe: 35:fd:94:8c:0f:bc:ec:77:e1:7b:76:e0:39:b3:24: b3:4a:9c:04:a1:ae:06:34:f1:60:f6:e4:0d:ff:3f: 4f:86:c5:3a:74:29:6e:3c:67:6a:82:48:17:e8:c3: 48:40:b9:61:32:2e:27:b5:c0:c3:f3:cd:3f:cb:46: 9f:48:d0:d7:c7:0f:ea:02:c1:63:6c:08:fa:1c:0d: c3:4b:1c:b4:7f:e4:11:5a:19:65:c7:0b:83:75:0e: ef:4b:7f:a1:e3:e1:85:01:e3:c9:b0:a9:54:00:6a: d9:e4:29:a5:3b:85:ce:47:b8:5f:96:90:0d:86:a4: 6d:66:f6:c0:7e:56:f9:db:93:dd:9a:a2:6c:73:5d: 7f:2c:10:83:7d:14:b8:c1:94:01:c5:22:26:19:43: c6:17:67:29:d6:58:a6:bf:12:1b:26:21:fc:08:6d: fa:36:cc:7e:12:96:66:6a:66:01:d4:d8:2d:fc:e7: 79:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7B:EB:10:C0:76:DF:E4:00:35:57:C6:7E:18:D4:E4:3D:00:60:A4:76 X509v3 Authority Key Identifier: keyid:9E:55:32:00:77:69:69:44:B1:61:3C:2E:8C:9C:60:6A:1E:06:EB:79 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nlUyAHdpaUSxYTwujJxgah4G63k.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/260b61-a348-4d47-92f6-1e0e8b909e34/1/nlUyAHdpaUSxYTwujJxgah4G63k.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/18/260b61-a348-4d47-92f6-1e0e8b909e34/1/nlUyAHdpaUSxYTwujJxgah4G63k.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption cb:28:f7:a3:99:b1:7f:34:df:f0:61:b9:99:d4:18:1e:65:9f: 37:01:1e:1a:a6:f9:1c:44:96:84:c8:bb:a7:05:db:a5:09:61: f6:19:37:c9:28:f5:c9:cb:a6:45:61:51:5f:aa:5b:01:d5:ef: 36:67:e7:05:6b:42:2e:ce:fa:7e:59:f6:93:79:05:74:ba:a2: 0b:48:b6:08:f3:84:ac:9e:37:5f:cc:aa:fc:f5:ed:0e:25:16: 97:69:98:1d:fd:e7:2a:6b:45:c2:0e:84:22:c0:73:d1:8c:28: 48:04:cc:c2:e7:dd:2b:f7:25:8d:c9:9f:87:f1:c7:a9:c3:a9: de:8e:3f:62:9c:4b:59:09:98:fe:d9:26:f0:bb:73:17:4c:42: 29:58:c5:a4:0d:2a:2c:2a:a5:1a:f3:7a:05:81:a0:6a:a6:e3: bc:d7:e8:ce:fc:d4:5e:b8:85:e1:92:a3:36:16:16:3d:20:0a: 9b:1c:77:7e:27:a3:67:f5:fb:84:7d:ac:98:97:0e:44:2f:45: 1b:b3:4a:34:66:f6:4c:50:07:98:c8:fd:14:ef:3d:da:0e:a8: 02:f8:6f:03:71:0d:5e:96:d3:5b:30:27:19:97:f8:b6:87:a3: 83:34:8b:44:a3:42:a7:e0:b6:02:97:5c:3e:05:49:60:01:51: 2b:14:e1:06 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZypRjddpkPKMNilFhKJRUaqMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDllNTUzMjAwNzc2OTY5NDRiMTYxM2MyZThjOWM2MDZhMWUw NmViNzkwHhcNMjYwMzAxMTIwMTE2WhcNMjYwMzAyMTIwMTE2WjAzMTEwLwYDVQQD Eyg3YmViMTBjMDc2ZGZlNDAwMzU1N2M2N2UxOGQ0ZTQzZDAwNjBhNDc2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw722snkJhrhjjAEBsXBLWJuldct9 k9oDehEO0nP0HLDwpk+FZ5lP+1S5s+yZmXn1b/UFHXuQo1+LzhItLPF/pUKh0UeR mR5nyP41/ZSMD7zsd+F7duA5sySzSpwEoa4GNPFg9uQN/z9PhsU6dCluPGdqgkgX 6MNIQLlhMi4ntcDD880/y0afSNDXxw/qAsFjbAj6HA3DSxy0f+QRWhllxwuDdQ7v S3+h4+GFAePJsKlUAGrZ5CmlO4XOR7hflpANhqRtZvbAflb525PdmqJsc11/LBCD fRS4wZQBxSImGUPGF2cp1limvxIbJiH8CG36Nsx+EpZmamYB1Ngt/Od5JwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHvrEMB23+QANVfGfhjU5D0AYKR2MB8GA1UdIwQY MBaAFJ5VMgB3aWlEsWE8LoycYGoeBut5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbmxVeUFIZHBhVVN4WVR3dWpKeGdhaDRHNjNrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOC8yNjBiNjEtYTM0OC00ZDQ3LTkyZjYt MWUwZThiOTA5ZTM0LzEvbmxVeUFIZHBhVVN4WVR3dWpKeGdhaDRHNjNrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xOC8yNjBiNjEtYTM0OC00ZDQ3LTkyZjYtMWUwZThiOTA5ZTM0 LzEvbmxVeUFIZHBhVVN4WVR3dWpKeGdhaDRHNjNrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAyyj3o5mx fzTf8GG5mdQYHmWfNwEeGqb5HESWhMi7pwXbpQlh9hk3ySj1ycumRWFRX6pbAdXv NmfnBWtCLs76fln2k3kFdLqiC0i2CPOErJ43X8yq/PXtDiUWl2mYHf3nKmtFwg6E IsBz0YwoSATMwufdK/cljcmfh/HHqcOp3o4/YpxLWQmY/tkm8LtzF0xCKVjFpA0q LCqlGvN6BYGgaqbjvNfozvzUXriF4ZKjNhYWPSAKmxx3fiejZ/X7hH2smJcORC9F G7NKNGb2TFAHmMj9FO892g6oAvhvA3ENXpbTWzAnGZf4toejgzSLRKNCp+C2Apdc PgVJYAFRKxThBg== -----END CERTIFICATE-----Generated at Sun Mar 1 14:49:22 2026 by rpki-client