$ rpki-client -vvvf rsync.krill.nlnetlabs.nl/repo/nlnetlabs/1/DC780D9935DABC701A4C4832B16C11D7743C399A.mft File: DC780D9935DABC701A4C4832B16C11D7743C399A.mft (raw, json) Hash identifier: jnmaaxzFkm8q9v/yZ0UAl4t9gpsYzjKeZi+jwTT0d9o= Subject key identifier: 77:94:19:8F:2D:20:25:F3:CC:72:F9:5A:1F:C7:C8:1A:36:09:38:CE Authority key identifier: DC:78:0D:99:35:DA:BC:70:1A:4C:48:32:B1:6C:11:D7:74:3C:39:9A Certificate issuer: /CN=dc780d9935dabc701a4c4832b16c11d7743c399a Certificate serial: 095CCB974060AACAB7E8B2B548EB8D60388AEAFB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3HgNmTXavHAaTEgysWwR13Q8OZo.cer Subject info access: rsync://rsync.krill.nlnetlabs.nl/repo/nlnetlabs/1/DC780D9935DABC701A4C4832B16C11D7743C399A.mft Manifest number: 022F Signing time: Sun 20 Sep 2026 16:15:59 +0000 Manifest this update: Sun 20 Sep 2026 16:10:59 +0000 Manifest next update: Mon 21 Sep 2026 17:59:59 +0000 Files and hashes: 1: 326130343a623930353a3a2f34382d3438203d3e203136353039.roa (hash: d+iw2diCkJRaNGhzIf4J/JKw8L1IDPPlPbWg6NjYiQ8=) 2: 326130343a623930373a3a2f34382d3438203d3e2030.roa (hash: pEkraM4NhbgBsFbDwa7w6tJcsCMwH3uOz0vykIUzTk8=) 3: 3138352e34392e3134322e302f32332d3233203d3e20323131333231.roa (hash: G71RBaKhsjP596XjbfAcbZmTzgSOwVARGZ/mPeB9am8=) 4: 3138352e34392e3134332e302f32342d3234203d3e20323131333231.roa (hash: 0B5YOvITIZWZRxiAsBfwVFBJO8A9+rknJ70VrZXbmhM=) 5: 3138352e34392e3134302e302f32332d3233203d3e2038353837.roa (hash: U8+OIXzaopDuaYf7hsd7liluEK65HTMfxtzOs2eUutU=) 6: 326130343a623930323a3a2f34382d3438203d3e20323131333231.roa (hash: DvRjC5YVaO6hAiGHU5zPxy3o6I0+1biPcChDZYr62qk=) 7: 326130343a623930373a3a2f34372d3437203d3e20323131333231.roa (hash: q5XBQbeSajkFemFHOP7sJXFLQua3ROC9i4L+KFjqA2Y=) 8: 326130343a623930343a3a2f34382d3438203d3e20323131333231.roa (hash: uEPfzD+wbnhTwsVWW/UrDfMoUMKBuHi0vPl0IGNr7n4=) 9: 326130343a623930303a3a2f33302d3330203d3e2038353837.roa (hash: YVqDFSJM9BpzA7j/lmc/Km9kXBCWwBuBJnXVpd3c0oA=) 10: 3138352e34392e3134332e302f32342d3234203d3e203630313331.roa (hash: 3y7Jbg3sm1uifLkJV88tgfg6D6rTEYYvAHPNscUUhHA=) 11: 326130343a623930303a3a2f33302d3332203d3e2038353837.roa (hash: mcRkbX+EcmuVG5kbogYs1kTfFjmT6GSDRiWlit7LIEo=) 12: DC780D9935DABC701A4C4832B16C11D7743C399A.crl (hash: Fkw48OCOWM7kAjz6uiVPiH+Ay/fKiR/diGrsen8ntMA=) 13: 326130343a623930363a3a2f34382d3438203d3e2030.roa (hash: eiOsAFzUoO5n+xOw6ZqDfb1W9mjnMVvG3lh8Uszxqbc=) 14: 3138352e34392e3134322e302f32342d3234203d3e2030.roa (hash: +h5nxp3r86DxkM+mEV1xj5BP7LH8Lp8uZ6CT1Hi1E54=) 15: C8623AA6C30FA8E058243708F5672D7960E52389.cer (hash: xh+MW2FduGLhuo30+/bFrTnjBprE+rX9TK+QGtrFq9E=) 16: 326130343a623930343a373230303a3a2f34302d3430203d3e20323131333231.roa (hash: refEY6cMSdDY7cBVUX5w6R5vf51PxokJ+N8DMMimo3o=) Validation: OK Signature path: rsync://rsync.krill.nlnetlabs.nl/repo/nlnetlabs/1/DC780D9935DABC701A4C4832B16C11D7743C399A.crl rsync://rsync.krill.nlnetlabs.nl/repo/nlnetlabs/1/DC780D9935DABC701A4C4832B16C11D7743C399A.mft rsync://rpki.ripe.net/repository/DEFAULT/3HgNmTXavHAaTEgysWwR13Q8OZo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 21 Sep 2026 17:59:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 09:5c:cb:97:40:60:aa:ca:b7:e8:b2:b5:48:eb:8d:60:38:8a:ea:fb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dc780d9935dabc701a4c4832b16c11d7743c399a Validity Not Before: Sep 20 16:10:59 2026 GMT Not After : Sep 21 17:59:59 2026 GMT Subject: CN=7794198F2D2025F3CC72F95A1FC7C81A360938CE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:b6:84:a1:8f:0d:8a:5e:c3:79:95:85:9f:15: 8a:ae:a0:99:65:1b:c9:54:92:09:4d:1f:c6:57:fe: 0a:61:7b:c1:6d:dd:64:dc:5a:6e:37:60:4d:23:80: 53:dc:c4:8a:6e:ea:5b:de:6c:e8:06:17:47:b4:ae: 76:48:66:27:87:74:f7:2f:36:40:3e:56:be:af:ce: c2:82:6d:cf:f0:a6:02:fc:5d:6f:26:f5:81:23:27: 38:14:8e:a4:94:38:ac:90:fe:93:c4:fe:9b:c2:c1: c2:6d:ac:ef:9a:72:c6:ad:4d:45:93:83:9c:86:f9: 89:d3:6a:28:36:ac:d5:3f:ea:5b:1d:c8:bb:9f:8f: 65:78:5c:f9:fa:93:c5:8d:30:6d:f2:68:04:e6:79: ac:ef:18:c0:74:31:92:d8:f1:8c:e6:d1:16:8b:2e: 79:4b:b1:a7:98:d8:4c:ba:23:e0:52:8c:f9:fe:3f: 22:03:a2:71:d5:ac:1e:4c:84:67:c6:e3:c8:d2:8a: 46:06:b8:89:d8:68:d4:be:e1:74:bc:de:9b:5b:ed: 31:ed:9d:e1:21:4d:fd:60:9f:28:2a:6b:e8:fc:92: c5:5e:4f:39:5b:0e:ed:35:63:b5:ca:8d:5d:99:ad: e9:e0:f2:e4:52:f4:10:8f:2c:d3:97:44:76:7c:84: 56:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:94:19:8F:2D:20:25:F3:CC:72:F9:5A:1F:C7:C8:1A:36:09:38:CE X509v3 Authority Key Identifier: keyid:DC:78:0D:99:35:DA:BC:70:1A:4C:48:32:B1:6C:11:D7:74:3C:39:9A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.krill.nlnetlabs.nl/repo/nlnetlabs/1/DC780D9935DABC701A4C4832B16C11D7743C399A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3HgNmTXavHAaTEgysWwR13Q8OZo.cer Subject Information Access: Signed Object - URI:rsync://rsync.krill.nlnetlabs.nl/repo/nlnetlabs/1/DC780D9935DABC701A4C4832B16C11D7743C399A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4b:f5:3b:b0:1e:ac:92:03:e2:f9:81:67:98:bb:61:bb:3c:a4: 86:0e:b7:78:ff:f7:68:7d:01:17:fb:60:e4:00:eb:f7:35:7f: 9b:65:0a:8a:bd:85:ea:f6:cf:3c:43:91:ef:ef:8c:ca:42:27: 75:13:95:64:90:a7:ce:6d:0e:09:96:d5:ab:4b:83:b3:af:84: c6:b3:d7:9a:0d:a8:05:ac:bf:b2:d1:5e:90:29:90:89:c8:9a: 5f:fc:c3:b5:e0:d5:e2:5b:7f:37:a8:69:b2:8b:5f:4f:cc:7d: 87:6a:12:65:6f:7b:5d:d4:c7:b7:e4:d4:50:f0:67:aa:47:c2: df:4c:7e:f9:b0:b8:c0:45:d1:ad:b1:ab:ed:bd:44:b7:06:6f: a7:3d:8b:16:a4:46:95:7f:69:7f:27:47:d6:3e:08:76:b6:56: 74:3d:96:2c:9a:72:11:e7:4d:74:cc:fd:55:fd:b3:6b:43:d1: 54:4c:b5:9c:36:38:f7:82:68:62:d1:80:4d:b4:e1:e8:b8:8c: b1:ea:d0:f1:40:74:20:3d:62:23:f5:5f:65:9e:2b:fa:a0:08: 0f:16:04:c9:d2:34:68:04:61:6e:e8:0e:a2:19:03:1b:e9:0f: fc:db:68:fa:bd:d3:a8:c3:87:0d:d1:63:a8:bb:10:be:21:15: 7a:43:a7:ac -----BEGIN CERTIFICATE----- MIIE8TCCA9mgAwIBAgIUCVzLl0Bgqsq36LK1SOuNYDiK6vswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoZGM3ODBkOTkzNWRhYmM3MDFhNGM0ODMyYjE2YzExZDc3 NDNjMzk5YTAeFw0yNjA5MjAxNjEwNTlaFw0yNjA5MjExNzU5NTlaMDMxMTAvBgNV BAMTKDc3OTQxOThGMkQyMDI1RjNDQzcyRjk1QTFGQzdDODFBMzYwOTM4Q0UwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCltoShjw2KXsN5lYWfFYquoJll G8lUkglNH8ZX/gphe8Ft3WTcWm43YE0jgFPcxIpu6lvebOgGF0e0rnZIZieHdPcv NkA+Vr6vzsKCbc/wpgL8XW8m9YEjJzgUjqSUOKyQ/pPE/pvCwcJtrO+acsatTUWT g5yG+YnTaig2rNU/6lsdyLufj2V4XPn6k8WNMG3yaATmeazvGMB0MZLY8Yzm0RaL LnlLsaeY2Ey6I+BSjPn+PyIDonHVrB5MhGfG48jSikYGuInYaNS+4XS83ptb7THt neEhTf1gnygqa+j8ksVeTzlbDu01Y7XKjV2Zreng8uRS9BCPLNOXRHZ8hFZJAgMB AAGjggH7MIIB9zAdBgNVHQ4EFgQUd5QZjy0gJfPMcvlaH8fIGjYJOM4wHwYDVR0j BBgwFoAU3HgNmTXavHAaTEgysWwR13Q8OZowDgYDVR0PAQH/BAQDAgeAMG8GA1Ud HwRoMGYwZKBioGCGXnJzeW5jOi8vcnN5bmMua3JpbGwubmxuZXRsYWJzLm5sL3Jl cG8vbmxuZXRsYWJzLzEvREM3ODBEOTkzNURBQkM3MDFBNEM0ODMyQjE2QzExRDc3 NDNDMzk5QS5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzov L3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzNIZ05tVFhhdkhBYVRF Z3lzV3dSMTNROE9aby5jZXIwegYIKwYBBQUHAQsEbjBsMGoGCCsGAQUFBzALhl5y c3luYzovL3JzeW5jLmtyaWxsLm5sbmV0bGFicy5ubC9yZXBvL25sbmV0bGFicy8x L0RDNzgwRDk5MzVEQUJDNzAxQTRDNDgzMkIxNkMxMUQ3NzQzQzM5OUEubWZ0MBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgAB BQAwBgQCAAIFADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUA A4IBAQBL9TuwHqySA+L5gWeYu2G7PKSGDrd4//dofQEX+2DkAOv3NX+bZQqKvYXq 9s88Q5Hv74zKQid1E5VkkKfObQ4JltWrS4Ozr4TGs9eaDagFrL+y0V6QKZCJyJpf /MO14NXiW383qGmyi19PzH2HahJlb3td1Me35NRQ8GeqR8LfTH75sLjARdGtsavt vUS3Bm+nPYsWpEaVf2l/J0fWPgh2tlZ0PZYsmnIR5010zP1V/bNrQ9FUTLWcNjj3 gmhi0YBNtOHouIyx6tDxQHQgPWIj9V9lniv6oAgPFgTJ0jRoBGFu6A6iGQMb6Q/8 22j6vdOow4cN0WOouxC+IRV6Q6es -----END CERTIFICATE-----Generated at Mon Sep 21 10:21:07 2026 by rpki-client