$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/260b61-a348-4d47-92f6-1e0e8b909e34/1/nlUyAHdpaUSxYTwujJxgah4G63k.mft File: nlUyAHdpaUSxYTwujJxgah4G63k.mft (raw, json) Hash identifier: S7rYX2jBwo0akl5Apjf8GzhBnU4abaLjsUGCJc7+FDQ= Subject key identifier: 29:36:1F:FF:BC:6F:2C:22:A7:B4:94:27:AB:0C:AC:04:89:55:B3:6A Authority key identifier: 9E:55:32:00:77:69:69:44:B1:61:3C:2E:8C:9C:60:6A:1E:06:EB:79 Certificate issuer: /CN=9e55320077696944b1613c2e8c9c606a1e06eb79 Certificate serial: 019D9C9A56E92EAD88EDB35FE6E065A54A97 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nlUyAHdpaUSxYTwujJxgah4G63k.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/260b61-a348-4d47-92f6-1e0e8b909e34/1/nlUyAHdpaUSxYTwujJxgah4G63k.mft Manifest number: 18E3 Signing time: Fri 17 Apr 2026 18:00:53 +0000 Manifest this update: Fri 17 Apr 2026 18:00:53 +0000 Manifest next update: Sat 18 Apr 2026 18:00:53 +0000 Files and hashes: 1: 8Eblc7pa_4U4okyHLfqfcyfnWz0.roa (hash: yDyQhyWU2Yy6CbJb1KU7PdxVdmn9PLwPpcooL0C53mY=) 2: AyLKfRccIqVZSZfeJQ1-KG_YPTU.asa (hash: utC08LUwBVA4cVQBYh5JTq1FqYPeFvwHosHL7fDW+sI=) 3: HvJf-bfTg2tiYUvSB0Kj9WjrWi0.roa (hash: Zj79TOXiKACE8B8W/OUq9I83R0d9i1y3XLh2/Gqubpw=) 4: W-sALm5q0yq3QnzfCn9zqwJqvaA.roa (hash: xnIdiawY8eAQvPvkfIlMj6UoPw+J3dJ14IvwIdndhxo=) 5: WDscPdpfG-kb__QIc1556x7o_PY.roa (hash: l96y3WYtqpU/N9iNr6T/BhsvK6KFKMEJ/k50G6U6KZ4=) 6: dDBO-S6Wp6dejnuaBq43TxSUg-A.roa (hash: 4J4YToYV6H1+Y7Dnf4EOV1eYe0uHDGZBia2zslZYn1Y=) 7: f9p5fANR3rgdNF9ibKB-GDcgYp0.asa (hash: qcx5yEHomaJVsdDB+zzIUqbgqwQXu1Ph9bsEC6CL9SQ=) 8: nlUyAHdpaUSxYTwujJxgah4G63k.crl (hash: 8j8gJj/jk8rwhP+4iq9HqRd6HMfs7ckvonzd9JC2jhY=) 9: ouM5YtdgzmK88LVBLR4anX4lhhA.roa (hash: 8cSgKHpeL4CzJp24fOsiDeOOZHqLgpt9SIcrnZhqRTM=) 10: pG6KdtKifWBBYo7DL8JxMRs-nM0.roa (hash: gKlmdKh10IDFHdiA03gsTAC30YiWDq57ljKUq/ouYK0=) 11: qvhCmUDzNKL8cJBghrHddfWvkhk.roa (hash: UnviboD1YkVxbTanetQc6UpYBMCuKxxYl0kVwOj2pxE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/260b61-a348-4d47-92f6-1e0e8b909e34/1/nlUyAHdpaUSxYTwujJxgah4G63k.crl rsync://rpki.ripe.net/repository/DEFAULT/18/260b61-a348-4d47-92f6-1e0e8b909e34/1/nlUyAHdpaUSxYTwujJxgah4G63k.mft rsync://rpki.ripe.net/repository/DEFAULT/nlUyAHdpaUSxYTwujJxgah4G63k.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 18 Apr 2026 16:00:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9d:9c:9a:56:e9:2e:ad:88:ed:b3:5f:e6:e0:65:a5:4a:97 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9e55320077696944b1613c2e8c9c606a1e06eb79 Validity Not Before: Apr 17 18:00:53 2026 GMT Not After : Apr 18 18:00:53 2026 GMT Subject: CN=29361fffbc6f2c22a7b49427ab0cac048955b36a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:b1:17:50:b9:3f:05:09:02:b6:9a:0f:51:10: 07:5a:de:c7:90:28:1b:e2:0b:b3:47:af:09:5b:48: 22:5b:bf:01:85:04:2d:a7:b2:54:1f:d2:c1:87:7b: 3f:f7:6c:44:6f:f5:ab:6c:ca:55:5a:dd:c3:b3:c6: 96:07:36:33:64:c2:4b:1b:ca:0d:6d:4f:dd:a3:32: 51:24:90:1d:1e:55:85:86:3e:06:66:3c:f7:ea:34: 17:14:83:ed:4c:26:2b:31:3c:5b:62:cf:e4:15:2d: b1:09:8e:03:fb:d7:59:57:0c:0b:36:09:7f:66:19: d6:5d:a4:cd:cc:c3:85:65:0e:97:65:78:76:28:7c: af:6b:09:8f:2d:84:35:7f:c2:41:a9:e8:73:ac:f8: 1f:f2:9f:0a:3b:df:1d:9d:4c:cf:df:94:24:6f:98: 17:18:df:af:1f:92:2c:61:7e:03:a2:da:88:2e:9a: 52:89:c9:c3:9e:ac:94:77:f5:a5:17:28:c0:73:2c: 31:ec:00:eb:9f:22:a6:28:60:4c:41:1b:7f:f2:a7: 31:9c:c7:79:25:a6:94:86:29:8c:f1:e8:43:4a:03: ed:a9:a5:3c:77:97:52:61:af:86:ef:a8:d4:6c:f1: 16:a0:6b:a0:ca:07:3b:9e:1f:bd:f1:95:d2:60:54: 8f:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:36:1F:FF:BC:6F:2C:22:A7:B4:94:27:AB:0C:AC:04:89:55:B3:6A X509v3 Authority Key Identifier: keyid:9E:55:32:00:77:69:69:44:B1:61:3C:2E:8C:9C:60:6A:1E:06:EB:79 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nlUyAHdpaUSxYTwujJxgah4G63k.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/260b61-a348-4d47-92f6-1e0e8b909e34/1/nlUyAHdpaUSxYTwujJxgah4G63k.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/18/260b61-a348-4d47-92f6-1e0e8b909e34/1/nlUyAHdpaUSxYTwujJxgah4G63k.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2d:da:56:c0:3f:d4:f7:c6:68:70:43:44:db:c8:73:61:82:45: 6e:1a:8b:b9:96:35:cc:6a:a9:99:a5:fb:29:04:05:f4:46:ad: f6:0a:7b:e7:32:9c:9a:2b:a8:e8:da:74:8d:b2:a6:a7:68:e0: 09:20:68:30:ef:9d:d6:7e:ca:03:8e:31:a9:71:45:b2:5b:a9: eb:e6:bb:07:35:94:9c:61:9f:f9:02:db:05:3e:40:0b:7e:57: c6:3f:46:c0:b1:5a:b8:86:ba:bf:2e:b2:af:8a:bc:df:5a:d1: 3b:ba:f6:7a:ff:f8:b3:26:17:ac:52:8c:04:31:72:ec:17:23: 79:77:8a:e4:44:8d:0f:69:2f:5f:f7:f4:8c:97:c0:c2:f8:2d: 4c:21:e6:54:07:e0:f4:b4:da:fc:c7:38:3d:ec:de:5f:6e:05: 76:b7:e6:9a:d2:6b:35:bd:7a:de:91:0c:00:ab:e9:b7:72:42: 98:25:32:95:c8:90:6a:3b:1d:66:ac:18:2c:da:b0:52:37:bf: 6c:f6:cb:87:c0:d2:10:68:c9:1d:e3:36:96:0f:1b:22:6d:27: 99:69:66:57:4b:2d:58:00:64:0a:e4:05:4c:5e:31:14:ea:92: 0a:33:34:75:bc:5d:31:6a:06:74:d4:0b:af:cb:6e:a5:9e:44: 3d:3f:99:5e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ2cmlbpLq2I7bNf5uBlpUqXMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDllNTUzMjAwNzc2OTY5NDRiMTYxM2MyZThjOWM2MDZhMWUw NmViNzkwHhcNMjYwNDE3MTgwMDUzWhcNMjYwNDE4MTgwMDUzWjAzMTEwLwYDVQQD EygyOTM2MWZmZmJjNmYyYzIyYTdiNDk0MjdhYjBjYWMwNDg5NTViMzZhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxrEXULk/BQkCtpoPURAHWt7HkCgb 4guzR68JW0giW78BhQQtp7JUH9LBh3s/92xEb/WrbMpVWt3Ds8aWBzYzZMJLG8oN bU/dozJRJJAdHlWFhj4GZjz36jQXFIPtTCYrMTxbYs/kFS2xCY4D+9dZVwwLNgl/ ZhnWXaTNzMOFZQ6XZXh2KHyvawmPLYQ1f8JBqehzrPgf8p8KO98dnUzP35Qkb5gX GN+vH5IsYX4DotqILppSicnDnqyUd/WlFyjAcywx7ADrnyKmKGBMQRt/8qcxnMd5 JaaUhimM8ehDSgPtqaU8d5dSYa+G76jUbPEWoGugygc7nh+98ZXSYFSPkQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCk2H/+8bywip7SUJ6sMrASJVbNqMB8GA1UdIwQY MBaAFJ5VMgB3aWlEsWE8LoycYGoeBut5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbmxVeUFIZHBhVVN4WVR3dWpKeGdhaDRHNjNrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOC8yNjBiNjEtYTM0OC00ZDQ3LTkyZjYt MWUwZThiOTA5ZTM0LzEvbmxVeUFIZHBhVVN4WVR3dWpKeGdhaDRHNjNrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xOC8yNjBiNjEtYTM0OC00ZDQ3LTkyZjYtMWUwZThiOTA5ZTM0 LzEvbmxVeUFIZHBhVVN4WVR3dWpKeGdhaDRHNjNrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALdpWwD/U 98ZocENE28hzYYJFbhqLuZY1zGqpmaX7KQQF9Eat9gp75zKcmiuo6Np0jbKmp2jg CSBoMO+d1n7KA44xqXFFslup6+a7BzWUnGGf+QLbBT5AC35Xxj9GwLFauIa6vy6y r4q831rRO7r2ev/4syYXrFKMBDFy7BcjeXeK5ESND2kvX/f0jJfAwvgtTCHmVAfg 9LTa/Mc4PezeX24FdrfmmtJrNb163pEMAKvpt3JCmCUylciQajsdZqwYLNqwUje/ bPbLh8DSEGjJHeM2lg8bIm0nmWlmV0stWABkCuQFTF4xFOqSCjM0dbxdMWoGdNQL r8tupZ5EPT+ZXg== -----END CERTIFICATE-----Generated at Fri Apr 17 23:47:37 2026 by rpki-client