$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/260b61-a348-4d47-92f6-1e0e8b909e34/1/nlUyAHdpaUSxYTwujJxgah4G63k.mft File: nlUyAHdpaUSxYTwujJxgah4G63k.mft (raw, json) Hash identifier: MbB9UMOf5fc0WvlcTNWnFLuDDG4c4DWLMO8ibFQVGME= Subject key identifier: D9:FE:21:3A:04:A0:3C:92:F7:EE:0B:9B:3C:47:78:0A:31:82:08:AF Authority key identifier: 9E:55:32:00:77:69:69:44:B1:61:3C:2E:8C:9C:60:6A:1E:06:EB:79 Certificate issuer: /CN=9e55320077696944b1613c2e8c9c606a1e06eb79 Certificate serial: 019D3A1C94C2B0EFB5B1A83DC6845F305807 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nlUyAHdpaUSxYTwujJxgah4G63k.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/260b61-a348-4d47-92f6-1e0e8b909e34/1/nlUyAHdpaUSxYTwujJxgah4G63k.mft Manifest number: 18B0 Signing time: Sun 29 Mar 2026 15:00:44 +0000 Manifest this update: Sun 29 Mar 2026 15:00:44 +0000 Manifest next update: Mon 30 Mar 2026 15:00:44 +0000 Files and hashes: 1: 8Eblc7pa_4U4okyHLfqfcyfnWz0.roa (hash: yDyQhyWU2Yy6CbJb1KU7PdxVdmn9PLwPpcooL0C53mY=) 2: AyLKfRccIqVZSZfeJQ1-KG_YPTU.asa (hash: utC08LUwBVA4cVQBYh5JTq1FqYPeFvwHosHL7fDW+sI=) 3: HvJf-bfTg2tiYUvSB0Kj9WjrWi0.roa (hash: Zj79TOXiKACE8B8W/OUq9I83R0d9i1y3XLh2/Gqubpw=) 4: W-sALm5q0yq3QnzfCn9zqwJqvaA.roa (hash: xnIdiawY8eAQvPvkfIlMj6UoPw+J3dJ14IvwIdndhxo=) 5: WDscPdpfG-kb__QIc1556x7o_PY.roa (hash: l96y3WYtqpU/N9iNr6T/BhsvK6KFKMEJ/k50G6U6KZ4=) 6: dDBO-S6Wp6dejnuaBq43TxSUg-A.roa (hash: 4J4YToYV6H1+Y7Dnf4EOV1eYe0uHDGZBia2zslZYn1Y=) 7: f9p5fANR3rgdNF9ibKB-GDcgYp0.asa (hash: qcx5yEHomaJVsdDB+zzIUqbgqwQXu1Ph9bsEC6CL9SQ=) 8: nlUyAHdpaUSxYTwujJxgah4G63k.crl (hash: lkJxEdSM/AmfaKhm9agfm0afrwqOE44yKY6Nvxt5yfY=) 9: ouM5YtdgzmK88LVBLR4anX4lhhA.roa (hash: 8cSgKHpeL4CzJp24fOsiDeOOZHqLgpt9SIcrnZhqRTM=) 10: pG6KdtKifWBBYo7DL8JxMRs-nM0.roa (hash: gKlmdKh10IDFHdiA03gsTAC30YiWDq57ljKUq/ouYK0=) 11: qvhCmUDzNKL8cJBghrHddfWvkhk.roa (hash: UnviboD1YkVxbTanetQc6UpYBMCuKxxYl0kVwOj2pxE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/260b61-a348-4d47-92f6-1e0e8b909e34/1/nlUyAHdpaUSxYTwujJxgah4G63k.crl rsync://rpki.ripe.net/repository/DEFAULT/18/260b61-a348-4d47-92f6-1e0e8b909e34/1/nlUyAHdpaUSxYTwujJxgah4G63k.mft rsync://rpki.ripe.net/repository/DEFAULT/nlUyAHdpaUSxYTwujJxgah4G63k.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 30 Mar 2026 15:00:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9d:3a:1c:94:c2:b0:ef:b5:b1:a8:3d:c6:84:5f:30:58:07 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9e55320077696944b1613c2e8c9c606a1e06eb79 Validity Not Before: Mar 29 15:00:44 2026 GMT Not After : Mar 30 15:00:44 2026 GMT Subject: CN=d9fe213a04a03c92f7ee0b9b3c47780a318208af Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:7f:59:92:0f:f5:5c:fc:d7:33:fc:93:df:3b: ab:ce:b1:f7:63:74:5e:38:d8:82:27:4f:73:cb:5a: 8e:c8:f3:68:4b:62:1a:cc:a3:26:99:07:62:0f:3b: 10:54:0f:35:36:f8:06:5d:c0:7a:a8:fd:67:a9:e5: 51:d5:12:93:53:6b:23:1d:4e:88:d3:0a:70:1d:92: e6:77:8a:a3:25:91:d6:7b:0a:ec:27:df:8d:98:1a: b4:cc:e1:9b:0e:d6:8d:c8:71:31:0c:48:b4:35:a7: 3b:00:16:71:4f:af:4b:bc:7d:5c:1e:87:40:3a:62: b7:af:83:37:eb:f7:d5:b8:50:6d:19:dd:dd:6a:ee: c0:12:7d:09:1a:7a:bc:32:42:0c:e4:8f:52:d5:1f: f8:2c:8e:88:8c:7f:3e:17:18:dc:77:3e:fc:ba:72: ed:db:2f:21:4e:89:11:f4:f5:57:82:cf:b0:6c:20: 42:39:7b:4b:00:78:f6:55:08:7d:e3:12:34:dc:c8: 6c:52:ba:9c:b8:60:f6:31:b3:76:0f:8e:fc:9e:22: a8:df:39:73:44:76:c5:67:03:01:62:82:d7:25:33: b9:12:a5:30:db:a8:d0:a8:15:a2:e1:e1:22:31:ff: 87:d1:96:91:27:56:5f:4c:55:3a:43:d3:64:06:34: a1:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:FE:21:3A:04:A0:3C:92:F7:EE:0B:9B:3C:47:78:0A:31:82:08:AF X509v3 Authority Key Identifier: keyid:9E:55:32:00:77:69:69:44:B1:61:3C:2E:8C:9C:60:6A:1E:06:EB:79 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nlUyAHdpaUSxYTwujJxgah4G63k.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/260b61-a348-4d47-92f6-1e0e8b909e34/1/nlUyAHdpaUSxYTwujJxgah4G63k.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/18/260b61-a348-4d47-92f6-1e0e8b909e34/1/nlUyAHdpaUSxYTwujJxgah4G63k.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 72:53:f8:6b:aa:e4:bc:06:a3:98:10:79:d3:62:e3:3e:2c:d1: 4b:01:d6:fa:c2:78:f8:a5:0b:b7:00:63:bf:eb:36:53:28:73: 31:42:bf:68:0b:34:60:63:66:a4:1e:c1:b3:a5:d1:f3:4c:19: 91:88:71:33:8f:27:84:76:01:60:7f:1c:fb:e1:65:e9:93:72: cf:c3:f5:0b:06:a3:b1:bc:6f:7d:d7:45:f2:5e:88:cf:97:c7: 39:e6:ce:10:d6:6c:ff:be:e4:2e:58:71:5c:bd:6f:65:49:c9: 9a:0c:33:43:6d:55:b2:63:fb:ff:7d:a0:f5:e2:cb:16:80:a6: 6b:fc:e2:eb:11:83:70:9d:af:ca:34:73:dd:98:80:5c:50:0e: 35:09:29:48:e6:4e:d1:e1:91:75:09:4d:97:36:0e:59:a6:a6: 4b:15:fc:6f:a7:38:37:76:26:46:d0:bb:86:df:75:80:be:9c: 63:51:ce:33:3f:81:9f:55:ff:81:31:74:43:4c:4f:96:9f:87: 03:74:18:6c:f9:7f:74:a7:b3:3f:3a:02:f0:9e:1e:4d:a7:8a: a9:07:2a:3b:b3:26:8a:c0:23:db:6d:bf:2e:e1:66:a9:52:e6: c6:44:f2:34:51:86:c4:bb:db:d0:80:cf:16:2e:9b:81:8a:3f: 01:2f:02:a0 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ06HJTCsO+1sag9xoRfMFgHMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDllNTUzMjAwNzc2OTY5NDRiMTYxM2MyZThjOWM2MDZhMWUw NmViNzkwHhcNMjYwMzI5MTUwMDQ0WhcNMjYwMzMwMTUwMDQ0WjAzMTEwLwYDVQQD EyhkOWZlMjEzYTA0YTAzYzkyZjdlZTBiOWIzYzQ3NzgwYTMxODIwOGFmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtH9Zkg/1XPzXM/yT3zurzrH3Y3Re ONiCJ09zy1qOyPNoS2IazKMmmQdiDzsQVA81NvgGXcB6qP1nqeVR1RKTU2sjHU6I 0wpwHZLmd4qjJZHWewrsJ9+NmBq0zOGbDtaNyHExDEi0Nac7ABZxT69LvH1cHodA OmK3r4M36/fVuFBtGd3dau7AEn0JGnq8MkIM5I9S1R/4LI6IjH8+Fxjcdz78unLt 2y8hTokR9PVXgs+wbCBCOXtLAHj2VQh94xI03MhsUrqcuGD2MbN2D478niKo3zlz RHbFZwMBYoLXJTO5EqUw26jQqBWi4eEiMf+H0ZaRJ1ZfTFU6Q9NkBjShEwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNn+IToEoDyS9+4LmzxHeAoxggivMB8GA1UdIwQY MBaAFJ5VMgB3aWlEsWE8LoycYGoeBut5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbmxVeUFIZHBhVVN4WVR3dWpKeGdhaDRHNjNrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOC8yNjBiNjEtYTM0OC00ZDQ3LTkyZjYt MWUwZThiOTA5ZTM0LzEvbmxVeUFIZHBhVVN4WVR3dWpKeGdhaDRHNjNrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xOC8yNjBiNjEtYTM0OC00ZDQ3LTkyZjYtMWUwZThiOTA5ZTM0 LzEvbmxVeUFIZHBhVVN4WVR3dWpKeGdhaDRHNjNrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAclP4a6rk vAajmBB502LjPizRSwHW+sJ4+KULtwBjv+s2UyhzMUK/aAs0YGNmpB7Bs6XR80wZ kYhxM48nhHYBYH8c++Fl6ZNyz8P1CwajsbxvfddF8l6Iz5fHOebOENZs/77kLlhx XL1vZUnJmgwzQ21VsmP7/32g9eLLFoCma/zi6xGDcJ2vyjRz3ZiAXFAONQkpSOZO 0eGRdQlNlzYOWaamSxX8b6c4N3YmRtC7ht91gL6cY1HOMz+Bn1X/gTF0Q0xPlp+H A3QYbPl/dKezPzoC8J4eTaeKqQcqO7MmisAj222/LuFmqVLmxkTyNFGGxLvb0IDP Fi6bgYo/AS8CoA== -----END CERTIFICATE-----Generated at Mon Mar 30 01:30:54 2026 by rpki-client