$ rpki-client -vvf rsync.krill.nlnetlabs.nl/repo/nlnetlabs/1/DC780D9935DABC701A4C4832B16C11D7743C399A.mft File: DC780D9935DABC701A4C4832B16C11D7743C399A.mft (raw, json) Hash identifier: rsIM695jfT602akcP4R2fFCt3I8g/eRREK8McGBSIwo= Subject key identifier: FD:28:97:E1:0E:BB:C7:7B:FE:92:30:FD:1F:D8:8E:E6:52:AC:17:22 Authority key identifier: DC:78:0D:99:35:DA:BC:70:1A:4C:48:32:B1:6C:11:D7:74:3C:39:9A Certificate issuer: /CN=dc780d9935dabc701a4c4832b16c11d7743c399a Certificate serial: 68DB21EC1ED457D925617444C4CB51F4EA7785C4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3HgNmTXavHAaTEgysWwR13Q8OZo.cer Subject info access: rsync://rsync.krill.nlnetlabs.nl/repo/nlnetlabs/1/DC780D9935DABC701A4C4832B16C11D7743C399A.mft Manifest number: 01E8 Signing time: Tue 28 Jul 2026 22:40:30 +0000 Manifest this update: Tue 28 Jul 2026 22:35:30 +0000 Manifest next update: Thu 30 Jul 2026 01:37:30 +0000 Files and hashes: 1: DC780D9935DABC701A4C4832B16C11D7743C399A.crl (hash: waFk+WQymzNE7BTx1JioxMtYRnBy0g9UV8mXWSA7Jc0=) 2: 326130343a623930353a3a2f34382d3438203d3e203136353039.roa (hash: d+iw2diCkJRaNGhzIf4J/JKw8L1IDPPlPbWg6NjYiQ8=) 3: 326130343a623930323a3a2f34382d3438203d3e20323131333231.roa (hash: DvRjC5YVaO6hAiGHU5zPxy3o6I0+1biPcChDZYr62qk=) 4: C8623AA6C30FA8E058243708F5672D7960E52389.cer (hash: xh+MW2FduGLhuo30+/bFrTnjBprE+rX9TK+QGtrFq9E=) 5: 3138352e34392e3134302e302f32332d3233203d3e2038353837.roa (hash: U8+OIXzaopDuaYf7hsd7liluEK65HTMfxtzOs2eUutU=) 6: 326130343a623930303a3a2f33302d3332203d3e2038353837.roa (hash: mcRkbX+EcmuVG5kbogYs1kTfFjmT6GSDRiWlit7LIEo=) 7: 326130343a623930373a3a2f34372d3437203d3e20323131333231.roa (hash: q5XBQbeSajkFemFHOP7sJXFLQua3ROC9i4L+KFjqA2Y=) 8: 326130343a623930343a373230303a3a2f34302d3430203d3e20323131333231.roa (hash: refEY6cMSdDY7cBVUX5w6R5vf51PxokJ+N8DMMimo3o=) 9: 326130343a623930373a3a2f34382d3438203d3e2030.roa (hash: pEkraM4NhbgBsFbDwa7w6tJcsCMwH3uOz0vykIUzTk8=) 10: 326130343a623930343a3a2f34382d3438203d3e20323131333231.roa (hash: uEPfzD+wbnhTwsVWW/UrDfMoUMKBuHi0vPl0IGNr7n4=) 11: 3138352e34392e3134322e302f32342d3234203d3e2030.roa (hash: +h5nxp3r86DxkM+mEV1xj5BP7LH8Lp8uZ6CT1Hi1E54=) 12: 326130343a623930303a3a2f33302d3330203d3e2038353837.roa (hash: YVqDFSJM9BpzA7j/lmc/Km9kXBCWwBuBJnXVpd3c0oA=) 13: 3138352e34392e3134322e302f32332d3233203d3e20323131333231.roa (hash: G71RBaKhsjP596XjbfAcbZmTzgSOwVARGZ/mPeB9am8=) 14: 3138352e34392e3134332e302f32342d3234203d3e20323131333231.roa (hash: 0B5YOvITIZWZRxiAsBfwVFBJO8A9+rknJ70VrZXbmhM=) 15: 326130343a623930363a3a2f34382d3438203d3e2030.roa (hash: eiOsAFzUoO5n+xOw6ZqDfb1W9mjnMVvG3lh8Uszxqbc=) Validation: OK Signature path: rsync://rsync.krill.nlnetlabs.nl/repo/nlnetlabs/1/DC780D9935DABC701A4C4832B16C11D7743C399A.crl rsync://rsync.krill.nlnetlabs.nl/repo/nlnetlabs/1/DC780D9935DABC701A4C4832B16C11D7743C399A.mft rsync://rpki.ripe.net/repository/DEFAULT/3HgNmTXavHAaTEgysWwR13Q8OZo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 29 Jul 2026 23:00:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 68:db:21:ec:1e:d4:57:d9:25:61:74:44:c4:cb:51:f4:ea:77:85:c4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dc780d9935dabc701a4c4832b16c11d7743c399a Validity Not Before: Jul 28 22:35:30 2026 GMT Not After : Jul 30 01:37:30 2026 GMT Subject: CN=FD2897E10EBBC77BFE9230FD1FD88EE652AC1722 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:a2:2e:68:37:e7:45:27:9d:4d:3a:c7:90:54: 08:37:53:d6:66:b5:bc:f6:ef:cf:ba:64:7b:d9:bb: 98:fd:04:6e:86:4c:0d:e0:72:93:ed:de:e7:9e:99: 12:3d:44:ff:a2:0e:49:2a:cd:d1:af:f2:09:cb:9b: 3c:25:ef:e3:74:2d:4a:9b:89:3b:c5:51:0a:7d:12: 7f:47:d7:f8:b9:a9:13:03:1d:fe:8b:7b:c6:16:88: 13:6a:c4:a4:80:d6:fb:3d:3c:17:21:33:18:04:98: 5c:30:9c:fb:d7:9f:f3:5e:3c:b1:76:e7:0b:1a:67: b7:8d:8b:ef:e5:8a:70:be:b4:6f:56:cc:6a:59:fb: 98:c5:49:b6:eb:10:45:b5:79:f5:fe:eb:71:c6:43: e9:28:81:6c:95:3d:f7:6a:9e:d5:fd:bc:46:c6:36: 3a:a6:96:02:8f:d7:96:47:19:37:17:e6:d2:4a:35: 7a:a6:43:f7:96:e7:60:18:77:ec:12:f8:5b:2c:28: b2:34:9c:44:b0:4f:a6:63:c6:26:43:93:4c:89:d5: a6:e4:93:b8:5c:a6:bd:c5:59:48:0d:be:97:85:47: a5:f5:8b:0b:34:35:0e:c2:81:cb:65:c8:35:cd:c3: 1a:16:71:f1:b1:6b:fd:78:18:a8:75:59:f9:56:5a: 51:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:28:97:E1:0E:BB:C7:7B:FE:92:30:FD:1F:D8:8E:E6:52:AC:17:22 X509v3 Authority Key Identifier: keyid:DC:78:0D:99:35:DA:BC:70:1A:4C:48:32:B1:6C:11:D7:74:3C:39:9A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.krill.nlnetlabs.nl/repo/nlnetlabs/1/DC780D9935DABC701A4C4832B16C11D7743C399A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3HgNmTXavHAaTEgysWwR13Q8OZo.cer Subject Information Access: Signed Object - URI:rsync://rsync.krill.nlnetlabs.nl/repo/nlnetlabs/1/DC780D9935DABC701A4C4832B16C11D7743C399A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 93:04:ee:e5:4f:8c:fd:4a:5d:a8:dc:e6:a3:a5:65:3d:04:5b: eb:54:8b:44:cb:cc:22:76:7b:1b:dd:c3:dc:fe:c5:bc:0a:d0: 38:eb:de:8a:30:99:61:15:8c:21:03:44:2b:9f:7a:b2:53:0b: 61:ca:fe:27:58:ed:95:39:42:ee:f1:c1:2a:28:5c:b1:ce:4c: cf:fe:50:ec:1c:be:ad:a3:ff:49:11:00:dd:08:69:e2:c9:84: fc:61:b3:d3:01:f0:39:88:9e:62:9b:5e:30:c5:41:6b:eb:5a: dd:f3:42:7d:bb:4d:a1:06:e9:a8:3d:74:2c:0d:99:1d:43:5c: 06:56:65:74:d4:b5:d3:0f:36:f2:e3:f9:9e:8e:8d:91:08:da: 84:5c:dd:60:6b:7d:a2:89:0c:0e:75:c0:70:93:e1:08:8a:05: 10:a9:90:1c:be:92:19:7d:d3:c8:04:9a:b8:29:ec:0e:f0:ed: 59:0a:1a:58:66:98:bd:c7:d0:c7:bf:d4:a4:55:fb:c6:f0:6a: 58:4f:1f:35:df:47:58:23:de:fe:8b:d1:f9:3e:c4:c9:47:a4: ee:b6:e2:37:23:98:1b:b1:15:9b:e8:32:9d:da:c4:a8:34:25: ce:a4:35:23:d5:03:c7:57:58:51:b4:5e:a3:bd:c0:7c:af:d6: 98:ef:7c:85 -----BEGIN CERTIFICATE----- MIIE8TCCA9mgAwIBAgIUaNsh7B7UV9klYXRExMtR9Op3hcQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoZGM3ODBkOTkzNWRhYmM3MDFhNGM0ODMyYjE2YzExZDc3 NDNjMzk5YTAeFw0yNjA3MjgyMjM1MzBaFw0yNjA3MzAwMTM3MzBaMDMxMTAvBgNV BAMTKEZEMjg5N0UxMEVCQkM3N0JGRTkyMzBGRDFGRDg4RUU2NTJBQzE3MjIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCuoi5oN+dFJ51NOseQVAg3U9Zm tbz278+6ZHvZu5j9BG6GTA3gcpPt3ueemRI9RP+iDkkqzdGv8gnLmzwl7+N0LUqb iTvFUQp9En9H1/i5qRMDHf6Le8YWiBNqxKSA1vs9PBchMxgEmFwwnPvXn/NePLF2 5wsaZ7eNi+/linC+tG9WzGpZ+5jFSbbrEEW1efX+63HGQ+kogWyVPfdqntX9vEbG NjqmlgKP15ZHGTcX5tJKNXqmQ/eW52AYd+wS+FssKLI0nESwT6ZjxiZDk0yJ1abk k7hcpr3FWUgNvpeFR6X1iws0NQ7CgctlyDXNwxoWcfGxa/14GKh1WflWWlFPAgMB AAGjggH7MIIB9zAdBgNVHQ4EFgQU/SiX4Q67x3v+kjD9H9iO5lKsFyIwHwYDVR0j BBgwFoAU3HgNmTXavHAaTEgysWwR13Q8OZowDgYDVR0PAQH/BAQDAgeAMG8GA1Ud HwRoMGYwZKBioGCGXnJzeW5jOi8vcnN5bmMua3JpbGwubmxuZXRsYWJzLm5sL3Jl cG8vbmxuZXRsYWJzLzEvREM3ODBEOTkzNURBQkM3MDFBNEM0ODMyQjE2QzExRDc3 NDNDMzk5QS5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzov L3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzNIZ05tVFhhdkhBYVRF Z3lzV3dSMTNROE9aby5jZXIwegYIKwYBBQUHAQsEbjBsMGoGCCsGAQUFBzALhl5y c3luYzovL3JzeW5jLmtyaWxsLm5sbmV0bGFicy5ubC9yZXBvL25sbmV0bGFicy8x L0RDNzgwRDk5MzVEQUJDNzAxQTRDNDgzMkIxNkMxMUQ3NzQzQzM5OUEubWZ0MBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgAB BQAwBgQCAAIFADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUA A4IBAQCTBO7lT4z9Sl2o3OajpWU9BFvrVItEy8widnsb3cPc/sW8CtA4696KMJlh FYwhA0Qrn3qyUwthyv4nWO2VOULu8cEqKFyxzkzP/lDsHL6to/9JEQDdCGniyYT8 YbPTAfA5iJ5im14wxUFr61rd80J9u02hBumoPXQsDZkdQ1wGVmV01LXTDzby4/me jo2RCNqEXN1ga32iiQwOdcBwk+EIigUQqZAcvpIZfdPIBJq4KewO8O1ZChpYZpi9 x9DHv9SkVfvG8GpYTx8130dYI97+i9H5PsTJR6TutuI3I5gbsRWb6DKd2sSoNCXO pDUj1QPHV1hRtF6jvcB8r9aY73yF -----END CERTIFICATE-----Generated at Wed Jul 29 08:31:05 2026 by rpki-client