$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/18/260b61-a348-4d47-92f6-1e0e8b909e34/1/nlUyAHdpaUSxYTwujJxgah4G63k.mft File: nlUyAHdpaUSxYTwujJxgah4G63k.mft (raw, json) Hash identifier: eCnNb/R47wDbQp1a3lhSjI5nP9nPLjxxLxPDx6K7kHk= Subject key identifier: 81:A4:0F:B6:A2:CE:BB:CD:F5:D3:D4:3D:2F:90:F0:F2:DA:E3:7B:8C Authority key identifier: 9E:55:32:00:77:69:69:44:B1:61:3C:2E:8C:9C:60:6A:1E:06:EB:79 Certificate issuer: /CN=9e55320077696944b1613c2e8c9c606a1e06eb79 Certificate serial: 01A13A48EA003C570261CB951B3A8EF67CF4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nlUyAHdpaUSxYTwujJxgah4G63k.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/260b61-a348-4d47-92f6-1e0e8b909e34/1/nlUyAHdpaUSxYTwujJxgah4G63k.mft Manifest number: 1AC3 Signing time: Wed 14 Oct 2026 12:00:19 +0000 Manifest this update: Wed 14 Oct 2026 12:00:19 +0000 Manifest next update: Thu 15 Oct 2026 12:00:19 +0000 Files and hashes: 1: 8Eblc7pa_4U4okyHLfqfcyfnWz0.roa (hash: yDyQhyWU2Yy6CbJb1KU7PdxVdmn9PLwPpcooL0C53mY=) 2: AyLKfRccIqVZSZfeJQ1-KG_YPTU.asa (hash: utC08LUwBVA4cVQBYh5JTq1FqYPeFvwHosHL7fDW+sI=) 3: HvJf-bfTg2tiYUvSB0Kj9WjrWi0.roa (hash: Zj79TOXiKACE8B8W/OUq9I83R0d9i1y3XLh2/Gqubpw=) 4: W-sALm5q0yq3QnzfCn9zqwJqvaA.roa (hash: xnIdiawY8eAQvPvkfIlMj6UoPw+J3dJ14IvwIdndhxo=) 5: WDscPdpfG-kb__QIc1556x7o_PY.roa (hash: l96y3WYtqpU/N9iNr6T/BhsvK6KFKMEJ/k50G6U6KZ4=) 6: dDBO-S6Wp6dejnuaBq43TxSUg-A.roa (hash: 4J4YToYV6H1+Y7Dnf4EOV1eYe0uHDGZBia2zslZYn1Y=) 7: emE3k5mpGo837IHnxMhWq1ufD6w.asa (hash: BWnROOAQXj4iBe5c9BYzHZA2Z+H659fm2Nrz/OItGO0=) 8: f9p5fANR3rgdNF9ibKB-GDcgYp0.asa (hash: qcx5yEHomaJVsdDB+zzIUqbgqwQXu1Ph9bsEC6CL9SQ=) 9: nlUyAHdpaUSxYTwujJxgah4G63k.crl (hash: Xk/jTQvVQTv3VflftjgJsBO/HMZuhS9OJE/GUYeDPaQ=) 10: ouM5YtdgzmK88LVBLR4anX4lhhA.roa (hash: 8cSgKHpeL4CzJp24fOsiDeOOZHqLgpt9SIcrnZhqRTM=) 11: pG6KdtKifWBBYo7DL8JxMRs-nM0.roa (hash: gKlmdKh10IDFHdiA03gsTAC30YiWDq57ljKUq/ouYK0=) 12: qvhCmUDzNKL8cJBghrHddfWvkhk.roa (hash: UnviboD1YkVxbTanetQc6UpYBMCuKxxYl0kVwOj2pxE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/260b61-a348-4d47-92f6-1e0e8b909e34/1/nlUyAHdpaUSxYTwujJxgah4G63k.crl rsync://rpki.ripe.net/repository/DEFAULT/18/260b61-a348-4d47-92f6-1e0e8b909e34/1/nlUyAHdpaUSxYTwujJxgah4G63k.mft rsync://rpki.ripe.net/repository/DEFAULT/nlUyAHdpaUSxYTwujJxgah4G63k.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 15 Oct 2026 12:00:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a1:3a:48:ea:00:3c:57:02:61:cb:95:1b:3a:8e:f6:7c:f4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9e55320077696944b1613c2e8c9c606a1e06eb79 Validity Not Before: Oct 14 12:00:19 2026 GMT Not After : Oct 15 12:00:19 2026 GMT Subject: CN=81a40fb6a2cebbcdf5d3d43d2f90f0f2dae37b8c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:a2:24:6f:a9:5b:57:4f:67:5e:61:dc:99:f6: 44:22:5e:e9:3f:44:89:72:9f:64:07:37:0d:15:e8: 55:b6:ff:d4:8d:3a:73:39:81:dd:c8:31:c7:e7:0f: 7a:9e:54:63:1e:1d:d3:02:cc:73:82:e5:c7:32:0f: 1a:4a:fe:b3:00:d6:6c:f8:40:f9:48:8c:86:ab:eb: f7:51:47:88:ba:b7:c9:20:19:5c:b3:f7:b5:50:72: 81:f3:8b:30:42:e2:81:5f:89:c7:80:34:ff:8b:43: a5:eb:86:fc:35:6d:04:4b:4d:a0:67:0c:61:91:2d: 9b:cf:aa:3d:fd:fc:c9:6f:32:07:e9:f7:b8:c4:57: a2:ca:c7:3e:76:28:1f:c5:b6:de:99:81:a4:c6:73: c1:07:3b:f1:5a:86:1d:65:ae:08:05:6d:8d:10:b9: a0:51:82:65:9f:86:df:53:06:5f:8c:1a:e9:53:46: 35:ee:72:d2:96:60:8a:c1:38:46:0e:b4:fd:b6:6d: a7:1c:ec:be:26:f3:fc:76:a2:b7:43:70:69:8c:83: ba:a6:a4:d5:39:06:bc:93:44:d9:49:87:10:1e:dd: 49:76:2a:6d:a9:8a:da:e6:36:6e:ef:01:8a:50:3b: cb:00:32:46:74:0f:fb:1e:ab:44:4c:d2:18:54:5d: 70:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:A4:0F:B6:A2:CE:BB:CD:F5:D3:D4:3D:2F:90:F0:F2:DA:E3:7B:8C X509v3 Authority Key Identifier: keyid:9E:55:32:00:77:69:69:44:B1:61:3C:2E:8C:9C:60:6A:1E:06:EB:79 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nlUyAHdpaUSxYTwujJxgah4G63k.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/260b61-a348-4d47-92f6-1e0e8b909e34/1/nlUyAHdpaUSxYTwujJxgah4G63k.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/18/260b61-a348-4d47-92f6-1e0e8b909e34/1/nlUyAHdpaUSxYTwujJxgah4G63k.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 18:8e:2e:f0:b1:25:97:4c:82:f2:69:8d:b5:86:05:f1:76:0a: ea:fc:fe:b6:1f:bb:4d:ca:3d:99:b6:d7:ce:eb:32:8d:ef:54: 9d:68:57:67:06:39:c1:d1:78:15:55:7a:7f:df:c8:de:fa:c7: a8:d1:f1:ab:08:1f:50:f2:94:87:e6:a1:c5:8d:f2:7d:96:ad: 21:5a:f0:d2:08:01:a5:65:e3:7b:ea:2a:a5:74:b1:bb:2f:2f: 80:da:3a:cc:e7:75:8f:cc:3e:ab:6e:a7:f6:ea:57:5c:8c:5a: 93:bd:e2:41:0d:36:ee:5b:b0:be:98:62:cc:03:f7:9c:cb:e7: 0a:f3:2e:a8:6f:90:5f:f5:3e:28:f6:98:eb:24:77:0e:5b:62: df:b2:b0:32:6d:00:b5:51:ac:2b:f8:a5:ee:60:e9:cd:0e:fa: 00:58:25:7b:c0:23:2f:63:70:d7:81:82:54:32:0f:64:d7:5e: 9f:67:82:d6:c7:e6:7f:85:08:18:20:b1:18:63:78:3b:4c:3b: 87:53:bd:31:d8:42:d9:a0:2d:0c:46:69:be:02:e7:2a:b1:7d: ce:4e:b5:69:7c:04:32:2b:25:b6:82:01:5a:e7:eb:7e:71:50: 35:5e:19:06:75:5b:b5:32:ae:58:2e:73:a6:eb:f4:3d:98:b1: 91:9d:51:2e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaE6SOoAPFcCYcuVGzqO9nz0MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDllNTUzMjAwNzc2OTY5NDRiMTYxM2MyZThjOWM2MDZhMWUw NmViNzkwHhcNMjYxMDE0MTIwMDE5WhcNMjYxMDE1MTIwMDE5WjAzMTEwLwYDVQQD Eyg4MWE0MGZiNmEyY2ViYmNkZjVkM2Q0M2QyZjkwZjBmMmRhZTM3YjhjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi6Ikb6lbV09nXmHcmfZEIl7pP0SJ cp9kBzcNFehVtv/UjTpzOYHdyDHH5w96nlRjHh3TAsxzguXHMg8aSv6zANZs+ED5 SIyGq+v3UUeIurfJIBlcs/e1UHKB84swQuKBX4nHgDT/i0Ol64b8NW0ES02gZwxh kS2bz6o9/fzJbzIH6fe4xFeiysc+digfxbbemYGkxnPBBzvxWoYdZa4IBW2NELmg UYJln4bfUwZfjBrpU0Y17nLSlmCKwThGDrT9tm2nHOy+JvP8dqK3Q3BpjIO6pqTV OQa8k0TZSYcQHt1JdiptqYra5jZu7wGKUDvLADJGdA/7HqtETNIYVF1w0QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIGkD7aizrvN9dPUPS+Q8PLa43uMMB8GA1UdIwQY MBaAFJ5VMgB3aWlEsWE8LoycYGoeBut5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbmxVeUFIZHBhVVN4WVR3dWpKeGdhaDRHNjNrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOC8yNjBiNjEtYTM0OC00ZDQ3LTkyZjYt MWUwZThiOTA5ZTM0LzEvbmxVeUFIZHBhVVN4WVR3dWpKeGdhaDRHNjNrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xOC8yNjBiNjEtYTM0OC00ZDQ3LTkyZjYtMWUwZThiOTA5ZTM0 LzEvbmxVeUFIZHBhVVN4WVR3dWpKeGdhaDRHNjNrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGI4u8LEl l0yC8mmNtYYF8XYK6vz+th+7Tco9mbbXzusyje9UnWhXZwY5wdF4FVV6f9/I3vrH qNHxqwgfUPKUh+ahxY3yfZatIVrw0ggBpWXje+oqpXSxuy8vgNo6zOd1j8w+q26n 9upXXIxak73iQQ027luwvphizAP3nMvnCvMuqG+QX/U+KPaY6yR3Dlti37KwMm0A tVGsK/il7mDpzQ76AFgle8AjL2Nw14GCVDIPZNden2eC1sfmf4UIGCCxGGN4O0w7 h1O9MdhC2aAtDEZpvgLnKrF9zk61aXwEMisltoIBWufrfnFQNV4ZBnVbtTKuWC5z puv0PZixkZ1RLg== -----END CERTIFICATE-----Generated at Wed Oct 14 20:09:06 2026 by rpki-client