$ rpki-client -vvvf rsync.krill.nlnetlabs.nl/repo/nlnetlabs/1/DC780D9935DABC701A4C4832B16C11D7743C399A.mft File: DC780D9935DABC701A4C4832B16C11D7743C399A.mft (raw, json) Hash identifier: fsDuZR4qvPbTQZY7yxjkOGlG4kUk0ouB/xJJH3gz/zs= Subject key identifier: 52:3C:89:FB:BE:A5:DC:F4:2E:B2:5D:BD:3D:3E:B9:15:50:25:7A:68 Authority key identifier: DC:78:0D:99:35:DA:BC:70:1A:4C:48:32:B1:6C:11:D7:74:3C:39:9A Certificate issuer: /CN=dc780d9935dabc701a4c4832b16c11d7743c399a Certificate serial: 469229D70BA0DC0E243276E7BAEA58672BF595EA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3HgNmTXavHAaTEgysWwR13Q8OZo.cer Subject info access: rsync://rsync.krill.nlnetlabs.nl/repo/nlnetlabs/1/DC780D9935DABC701A4C4832B16C11D7743C399A.mft Manifest number: 026D Signing time: Thu 05 Nov 2026 07:11:01 +0000 Manifest this update: Thu 05 Nov 2026 07:06:01 +0000 Manifest next update: Fri 06 Nov 2026 09:27:01 +0000 Files and hashes: 1: 3138352e34392e3134322e302f32332d3233203d3e20323131333231.roa (hash: G71RBaKhsjP596XjbfAcbZmTzgSOwVARGZ/mPeB9am8=) 2: 326130343a623930303a3530303a3a2f34302d3430203d3e203630313331.roa (hash: aHSU2LAP9+uQoMkIpvrqOzq9aYzl4H0ZJ31M+HGxbv0=) 3: 326130343a623930373a3a2f34382d3438203d3e2030.roa (hash: pEkraM4NhbgBsFbDwa7w6tJcsCMwH3uOz0vykIUzTk8=) 4: 326130343a623930343a3a2f34382d3438203d3e20323131333231.roa (hash: uEPfzD+wbnhTwsVWW/UrDfMoUMKBuHi0vPl0IGNr7n4=) 5: 3138352e34392e3134302e302f32332d3233203d3e2038353837.roa (hash: U8+OIXzaopDuaYf7hsd7liluEK65HTMfxtzOs2eUutU=) 6: C8623AA6C30FA8E058243708F5672D7960E52389.cer (hash: xh+MW2FduGLhuo30+/bFrTnjBprE+rX9TK+QGtrFq9E=) 7: DC780D9935DABC701A4C4832B16C11D7743C399A.crl (hash: XZKHeSNNmhAf0LDRwJozFHGDRF1kOGAEuA/VHyO78+w=) 8: 326130343a623930303a3a2f33302d3330203d3e2038353837.roa (hash: YVqDFSJM9BpzA7j/lmc/Km9kXBCWwBuBJnXVpd3c0oA=) 9: 3138352e34392e3134322e302f32342d3234203d3e2030.roa (hash: +h5nxp3r86DxkM+mEV1xj5BP7LH8Lp8uZ6CT1Hi1E54=) 10: 326130343a623930353a3a2f34382d3438203d3e203136353039.roa (hash: d+iw2diCkJRaNGhzIf4J/JKw8L1IDPPlPbWg6NjYiQ8=) 11: 326130343a623930343a373230303a3a2f34302d3430203d3e20323131333231.roa (hash: F4DaaBvGL9dgBxkY4xsFoeNBV/3e5iKiYWMDoodFLqo=) 12: 3138352e34392e3134332e302f32342d3234203d3e203630313331.roa (hash: 3y7Jbg3sm1uifLkJV88tgfg6D6rTEYYvAHPNscUUhHA=) 13: 326130343a623930363a3a2f34382d3438203d3e2030.roa (hash: eiOsAFzUoO5n+xOw6ZqDfb1W9mjnMVvG3lh8Uszxqbc=) 14: 3138352e34392e3134332e302f32342d3234203d3e20323131333231.roa (hash: 0B5YOvITIZWZRxiAsBfwVFBJO8A9+rknJ70VrZXbmhM=) 15: 326130343a623930373a3a2f34372d3437203d3e20323131333231.roa (hash: q5XBQbeSajkFemFHOP7sJXFLQua3ROC9i4L+KFjqA2Y=) 16: 326130343a623930323a3a2f34382d3438203d3e20323131333231.roa (hash: DvRjC5YVaO6hAiGHU5zPxy3o6I0+1biPcChDZYr62qk=) 17: 326130343a623930303a3a2f33302d3332203d3e2038353837.roa (hash: mcRkbX+EcmuVG5kbogYs1kTfFjmT6GSDRiWlit7LIEo=) 18: 326130343a623930303a3a2f34302d3430203d3e2038353837.roa (hash: C+7VhiatX/AuDzxhoKtyvY9d94VTo0QlL+iBBqSiSk8=) Validation: OK Signature path: rsync://rsync.krill.nlnetlabs.nl/repo/nlnetlabs/1/DC780D9935DABC701A4C4832B16C11D7743C399A.crl rsync://rsync.krill.nlnetlabs.nl/repo/nlnetlabs/1/DC780D9935DABC701A4C4832B16C11D7743C399A.mft rsync://rpki.ripe.net/repository/DEFAULT/3HgNmTXavHAaTEgysWwR13Q8OZo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 06 Nov 2026 08:45:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 46:92:29:d7:0b:a0:dc:0e:24:32:76:e7:ba:ea:58:67:2b:f5:95:ea Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dc780d9935dabc701a4c4832b16c11d7743c399a Validity Not Before: Nov 5 07:06:01 2026 GMT Not After : Nov 6 09:27:01 2026 GMT Subject: CN=523C89FBBEA5DCF42EB25DBD3D3EB91550257A68 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:a1:26:8b:db:65:19:48:d3:37:5a:26:32:2e: 62:f1:fc:30:2c:80:99:1f:2b:94:35:37:00:8c:21: e7:86:9a:95:a6:96:95:ae:65:6b:d1:5b:62:f6:6c: 20:e1:82:78:be:b3:2a:89:5a:c3:1f:af:0e:6b:dd: 2e:48:03:ae:d3:ff:ba:d6:af:85:8f:53:a3:dc:62: e2:a4:22:1f:85:7d:43:5f:14:17:b6:0b:56:43:bf: 91:00:21:26:99:31:3d:b9:f1:e5:3e:c5:93:16:d9: d7:ea:27:aa:a5:a8:e8:a4:50:dc:b1:2b:a7:ac:df: 80:51:d0:90:dc:b2:34:cc:fb:59:a0:4c:51:41:12: b8:77:8b:9c:04:52:06:f6:7f:9f:8b:be:e2:23:62: 7e:00:71:6d:18:fe:01:bd:73:6d:00:b4:34:eb:c4: 9a:8b:bf:3b:08:d7:c4:37:a8:3a:e0:7d:99:97:c1: ef:31:e5:37:2c:f7:d4:e9:aa:cf:35:0c:b9:cb:9b: d4:10:8c:f3:68:b0:a7:3b:87:8f:5f:d6:df:25:7d: b6:31:87:91:41:23:65:27:ee:ce:e8:76:9f:8d:e3: 1f:2c:cb:2c:61:72:14:d3:b1:1d:66:57:bb:69:f8: 58:d1:4c:12:d5:b4:88:2d:6c:80:89:13:66:59:2d: 1b:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:3C:89:FB:BE:A5:DC:F4:2E:B2:5D:BD:3D:3E:B9:15:50:25:7A:68 X509v3 Authority Key Identifier: keyid:DC:78:0D:99:35:DA:BC:70:1A:4C:48:32:B1:6C:11:D7:74:3C:39:9A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.krill.nlnetlabs.nl/repo/nlnetlabs/1/DC780D9935DABC701A4C4832B16C11D7743C399A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3HgNmTXavHAaTEgysWwR13Q8OZo.cer Subject Information Access: Signed Object - URI:rsync://rsync.krill.nlnetlabs.nl/repo/nlnetlabs/1/DC780D9935DABC701A4C4832B16C11D7743C399A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 54:ac:46:ff:82:c5:1c:e8:bb:40:74:75:34:5b:6d:fd:3b:85: 19:78:0f:3c:8b:1a:7b:1f:01:5b:72:e2:dc:44:66:65:8d:cd: 16:3d:14:de:80:86:3f:68:cc:f0:5d:53:42:bc:9c:6f:d3:94: 74:7d:1d:8f:7c:e6:a7:fa:ee:23:1a:1d:5d:e7:11:c9:62:97: 83:7e:c9:6c:c2:c0:f8:8f:fc:38:72:5a:47:3c:b7:a3:a6:71: 3e:a9:71:56:49:d3:4c:de:a8:3b:ed:af:d1:46:41:05:7c:16: 3f:64:b0:0e:28:6c:91:4e:8b:ea:15:44:73:4d:94:c4:e6:38: 36:c2:3c:07:27:22:70:95:d1:cd:d8:25:5b:e9:b1:b9:39:5d: 63:6a:b5:7f:cd:04:2e:a8:4a:e3:04:64:81:e2:4c:5d:bc:69: b2:ff:cb:b5:d9:21:10:c0:71:5d:44:17:d8:3f:b9:a7:a4:bd: 62:6c:c7:47:56:d3:c4:29:dd:ca:af:65:b4:0b:c7:bb:1e:be: 55:64:28:00:7f:5f:ab:af:3d:e1:9f:a6:5f:09:e1:5c:f9:33: 1a:f7:78:d1:6e:6a:c2:cc:13:fc:3d:8a:fb:3c:15:26:a6:da: fe:12:0a:d3:be:35:21:f6:58:f6:6d:c1:7c:27:c2:7d:4f:e5: e2:da:11:4b -----BEGIN CERTIFICATE----- MIIE8TCCA9mgAwIBAgIURpIp1wug3A4kMnbnuupYZyv1leowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoZGM3ODBkOTkzNWRhYmM3MDFhNGM0ODMyYjE2YzExZDc3 NDNjMzk5YTAeFw0yNjExMDUwNzA2MDFaFw0yNjExMDYwOTI3MDFaMDMxMTAvBgNV BAMTKDUyM0M4OUZCQkVBNURDRjQyRUIyNURCRDNEM0VCOTE1NTAyNTdBNjgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJoSaL22UZSNM3WiYyLmLx/DAs gJkfK5Q1NwCMIeeGmpWmlpWuZWvRW2L2bCDhgni+syqJWsMfrw5r3S5IA67T/7rW r4WPU6PcYuKkIh+FfUNfFBe2C1ZDv5EAISaZMT258eU+xZMW2dfqJ6qlqOikUNyx K6es34BR0JDcsjTM+1mgTFFBErh3i5wEUgb2f5+LvuIjYn4AcW0Y/gG9c20AtDTr xJqLvzsI18Q3qDrgfZmXwe8x5Tcs99Tpqs81DLnLm9QQjPNosKc7h49f1t8lfbYx h5FBI2Un7s7odp+N4x8syyxhchTTsR1mV7tp+FjRTBLVtIgtbICJE2ZZLRuBAgMB AAGjggH7MIIB9zAdBgNVHQ4EFgQUUjyJ+76l3PQusl29PT65FVAlemgwHwYDVR0j BBgwFoAU3HgNmTXavHAaTEgysWwR13Q8OZowDgYDVR0PAQH/BAQDAgeAMG8GA1Ud HwRoMGYwZKBioGCGXnJzeW5jOi8vcnN5bmMua3JpbGwubmxuZXRsYWJzLm5sL3Jl cG8vbmxuZXRsYWJzLzEvREM3ODBEOTkzNURBQkM3MDFBNEM0ODMyQjE2QzExRDc3 NDNDMzk5QS5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzov L3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzNIZ05tVFhhdkhBYVRF Z3lzV3dSMTNROE9aby5jZXIwegYIKwYBBQUHAQsEbjBsMGoGCCsGAQUFBzALhl5y c3luYzovL3JzeW5jLmtyaWxsLm5sbmV0bGFicy5ubC9yZXBvL25sbmV0bGFicy8x L0RDNzgwRDk5MzVEQUJDNzAxQTRDNDgzMkIxNkMxMUQ3NzQzQzM5OUEubWZ0MBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgAB BQAwBgQCAAIFADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUA A4IBAQBUrEb/gsUc6LtAdHU0W239O4UZeA88ixp7HwFbcuLcRGZljc0WPRTegIY/ aMzwXVNCvJxv05R0fR2PfOan+u4jGh1d5xHJYpeDfslswsD4j/w4clpHPLejpnE+ qXFWSdNM3qg77a/RRkEFfBY/ZLAOKGyRTovqFURzTZTE5jg2wjwHJyJwldHN2CVb 6bG5OV1jarV/zQQuqErjBGSB4kxdvGmy/8u12SEQwHFdRBfYP7mnpL1ibMdHVtPE Kd3Kr2W0C8e7Hr5VZCgAf1+rrz3hn6ZfCeFc+TMa93jRbmrCzBP8PYr7PBUmptr+ EgrTvjUh9lj2bcF8J8J9T+Xi2hFL -----END CERTIFICATE-----Generated at Thu Nov 5 14:26:33 2026 by rpki-client