$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/260b61-a348-4d47-92f6-1e0e8b909e34/1/nlUyAHdpaUSxYTwujJxgah4G63k.mft File: nlUyAHdpaUSxYTwujJxgah4G63k.mft (raw, json) Hash identifier: EqR1dFKdp1wo8ing951IkaoGsIRH3Q2zt/glz+8FvAA= Subject key identifier: 55:D8:CF:12:60:05:DC:21:EA:1E:36:87:1D:CB:EC:98:16:E6:7B:7B Authority key identifier: 9E:55:32:00:77:69:69:44:B1:61:3C:2E:8C:9C:60:6A:1E:06:EB:79 Certificate issuer: /CN=9e55320077696944b1613c2e8c9c606a1e06eb79 Certificate serial: 019FAB9ACBA4D52760FA8F6DB21AC9A9EC9A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nlUyAHdpaUSxYTwujJxgah4G63k.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/260b61-a348-4d47-92f6-1e0e8b909e34/1/nlUyAHdpaUSxYTwujJxgah4G63k.mft Manifest number: 19F4 Signing time: Wed 29 Jul 2026 02:01:16 +0000 Manifest this update: Wed 29 Jul 2026 02:01:16 +0000 Manifest next update: Thu 30 Jul 2026 02:01:16 +0000 Files and hashes: 1: 8Eblc7pa_4U4okyHLfqfcyfnWz0.roa (hash: yDyQhyWU2Yy6CbJb1KU7PdxVdmn9PLwPpcooL0C53mY=) 2: AyLKfRccIqVZSZfeJQ1-KG_YPTU.asa (hash: utC08LUwBVA4cVQBYh5JTq1FqYPeFvwHosHL7fDW+sI=) 3: HvJf-bfTg2tiYUvSB0Kj9WjrWi0.roa (hash: Zj79TOXiKACE8B8W/OUq9I83R0d9i1y3XLh2/Gqubpw=) 4: W-sALm5q0yq3QnzfCn9zqwJqvaA.roa (hash: xnIdiawY8eAQvPvkfIlMj6UoPw+J3dJ14IvwIdndhxo=) 5: WDscPdpfG-kb__QIc1556x7o_PY.roa (hash: l96y3WYtqpU/N9iNr6T/BhsvK6KFKMEJ/k50G6U6KZ4=) 6: dDBO-S6Wp6dejnuaBq43TxSUg-A.roa (hash: 4J4YToYV6H1+Y7Dnf4EOV1eYe0uHDGZBia2zslZYn1Y=) 7: f9p5fANR3rgdNF9ibKB-GDcgYp0.asa (hash: qcx5yEHomaJVsdDB+zzIUqbgqwQXu1Ph9bsEC6CL9SQ=) 8: nlUyAHdpaUSxYTwujJxgah4G63k.crl (hash: Lgju8k8hTZ8tmDmh8nrbhqdoZi8s1/FNz/aCmOV4tF0=) 9: ouM5YtdgzmK88LVBLR4anX4lhhA.roa (hash: 8cSgKHpeL4CzJp24fOsiDeOOZHqLgpt9SIcrnZhqRTM=) 10: pG6KdtKifWBBYo7DL8JxMRs-nM0.roa (hash: gKlmdKh10IDFHdiA03gsTAC30YiWDq57ljKUq/ouYK0=) 11: qvhCmUDzNKL8cJBghrHddfWvkhk.roa (hash: UnviboD1YkVxbTanetQc6UpYBMCuKxxYl0kVwOj2pxE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/260b61-a348-4d47-92f6-1e0e8b909e34/1/nlUyAHdpaUSxYTwujJxgah4G63k.crl rsync://rpki.ripe.net/repository/DEFAULT/18/260b61-a348-4d47-92f6-1e0e8b909e34/1/nlUyAHdpaUSxYTwujJxgah4G63k.mft rsync://rpki.ripe.net/repository/DEFAULT/nlUyAHdpaUSxYTwujJxgah4G63k.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 29 Jul 2026 23:00:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9f:ab:9a:cb:a4:d5:27:60:fa:8f:6d:b2:1a:c9:a9:ec:9a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9e55320077696944b1613c2e8c9c606a1e06eb79 Validity Not Before: Jul 29 02:01:16 2026 GMT Not After : Jul 30 02:01:16 2026 GMT Subject: CN=55d8cf126005dc21ea1e36871dcbec9816e67b7b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:73:7e:2d:e4:92:80:59:b7:4f:c0:a1:ff:cf: 50:c0:17:22:8b:c9:78:5c:c4:43:57:25:64:6c:62: a8:64:92:bd:bb:42:ac:5b:b4:e5:23:17:1f:b3:7e: ec:f5:14:61:09:11:7a:e7:a9:7e:de:f8:b6:cd:3b: b2:94:be:41:28:39:bc:b8:1d:d2:ff:a1:e3:8d:b3: ea:f9:31:c3:c5:ed:e8:05:66:66:da:9b:ea:da:63: f1:ef:96:dd:49:5e:4b:74:18:4d:7c:7a:d0:54:ec: 3b:e3:e2:ae:3e:5f:c7:b6:72:47:03:c3:59:43:9c: e1:64:53:fe:94:d7:5d:a6:06:4c:e8:ef:48:4b:80: b7:8c:7d:1b:20:fe:81:a2:d2:b4:5e:4c:df:e4:37: b8:ab:23:dc:d6:5b:6f:27:65:96:c4:5c:11:d3:26: f8:16:8c:21:0b:bd:ec:ca:43:bf:04:03:18:f9:fa: 0e:ea:8b:a5:e6:68:89:0a:95:a1:af:f0:46:04:f3: 9a:79:db:5b:be:79:2c:ea:0e:d3:23:80:7b:97:94: 20:08:99:e3:4d:1d:d1:2d:b5:09:e1:85:ab:d2:bf: 30:42:de:eb:0d:8f:d1:31:b7:7c:b1:4f:19:ec:2a: b2:f0:06:24:c2:76:5d:55:48:04:b8:f9:28:15:47: aa:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 55:D8:CF:12:60:05:DC:21:EA:1E:36:87:1D:CB:EC:98:16:E6:7B:7B X509v3 Authority Key Identifier: keyid:9E:55:32:00:77:69:69:44:B1:61:3C:2E:8C:9C:60:6A:1E:06:EB:79 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nlUyAHdpaUSxYTwujJxgah4G63k.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/260b61-a348-4d47-92f6-1e0e8b909e34/1/nlUyAHdpaUSxYTwujJxgah4G63k.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/18/260b61-a348-4d47-92f6-1e0e8b909e34/1/nlUyAHdpaUSxYTwujJxgah4G63k.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b9:ce:05:95:48:e9:ae:29:21:f3:71:cc:9e:5f:84:ea:4f:ff: 72:62:c2:6a:f3:79:b7:38:1a:e3:4f:cd:08:11:d8:d8:02:70: 5e:8f:ef:e5:f2:b2:1e:ad:30:4b:58:30:56:15:53:66:64:a4: a1:ac:70:82:e8:b9:15:5f:c5:e4:6b:cb:85:eb:6f:af:e9:24: 86:20:73:81:fe:d6:fe:32:6c:df:f4:08:45:48:c3:52:81:1a: 04:32:a7:f0:9b:f4:70:3d:44:fd:84:21:2d:ef:76:f7:b7:f2: 49:1b:cb:f5:04:98:d1:bc:2a:73:be:4e:15:2f:50:e7:a1:e2: 87:07:20:b4:c5:4f:7a:1f:bc:77:bd:bb:2a:5d:3d:53:74:9e: c8:c5:d0:8d:64:44:7b:23:1d:8f:87:83:58:ef:c4:14:da:64: 50:cb:5d:90:0b:0f:97:b5:34:93:10:80:f3:69:01:35:64:29: a9:c2:75:a2:6f:1c:94:a4:53:04:19:29:5a:2c:ae:f8:c5:a4: 9a:ec:86:70:fd:97:b2:0a:93:84:58:5f:33:5d:7a:7c:64:53: a0:b0:9c:ae:75:89:0d:ae:b8:f8:c4:2c:02:2b:bc:ec:9e:10: 64:59:0c:99:80:bd:54:d1:71:0b:25:20:78:11:f2:b3:1a:37: 5d:0c:60:0e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ+rmsuk1Sdg+o9tshrJqeyaMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDllNTUzMjAwNzc2OTY5NDRiMTYxM2MyZThjOWM2MDZhMWUw NmViNzkwHhcNMjYwNzI5MDIwMTE2WhcNMjYwNzMwMDIwMTE2WjAzMTEwLwYDVQQD Eyg1NWQ4Y2YxMjYwMDVkYzIxZWExZTM2ODcxZGNiZWM5ODE2ZTY3YjdiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmXN+LeSSgFm3T8Ch/89QwBcii8l4 XMRDVyVkbGKoZJK9u0KsW7TlIxcfs37s9RRhCRF656l+3vi2zTuylL5BKDm8uB3S /6HjjbPq+THDxe3oBWZm2pvq2mPx75bdSV5LdBhNfHrQVOw74+KuPl/HtnJHA8NZ Q5zhZFP+lNddpgZM6O9IS4C3jH0bIP6BotK0Xkzf5De4qyPc1ltvJ2WWxFwR0yb4 FowhC73sykO/BAMY+foO6oul5miJCpWhr/BGBPOaedtbvnks6g7TI4B7l5QgCJnj TR3RLbUJ4YWr0r8wQt7rDY/RMbd8sU8Z7Cqy8AYkwnZdVUgEuPkoFUeq3QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFXYzxJgBdwh6h42hx3L7JgW5nt7MB8GA1UdIwQY MBaAFJ5VMgB3aWlEsWE8LoycYGoeBut5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbmxVeUFIZHBhVVN4WVR3dWpKeGdhaDRHNjNrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOC8yNjBiNjEtYTM0OC00ZDQ3LTkyZjYt MWUwZThiOTA5ZTM0LzEvbmxVeUFIZHBhVVN4WVR3dWpKeGdhaDRHNjNrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xOC8yNjBiNjEtYTM0OC00ZDQ3LTkyZjYtMWUwZThiOTA5ZTM0 LzEvbmxVeUFIZHBhVVN4WVR3dWpKeGdhaDRHNjNrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAuc4FlUjp rikh83HMnl+E6k//cmLCavN5tzga40/NCBHY2AJwXo/v5fKyHq0wS1gwVhVTZmSk oaxwgui5FV/F5GvLhetvr+kkhiBzgf7W/jJs3/QIRUjDUoEaBDKn8Jv0cD1E/YQh Le9297fySRvL9QSY0bwqc75OFS9Q56HihwcgtMVPeh+8d727Kl09U3SeyMXQjWRE eyMdj4eDWO/EFNpkUMtdkAsPl7U0kxCA82kBNWQpqcJ1om8clKRTBBkpWiyu+MWk muyGcP2XsgqThFhfM116fGRToLCcrnWJDa64+MQsAiu87J4QZFkMmYC9VNFxCyUg eBHysxo3XQxgDg== -----END CERTIFICATE-----Generated at Wed Jul 29 03:43:40 2026 by rpki-client