$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/18/260b61-a348-4d47-92f6-1e0e8b909e34/1/nlUyAHdpaUSxYTwujJxgah4G63k.mft File: nlUyAHdpaUSxYTwujJxgah4G63k.mft (raw, json) Hash identifier: HyoT42YHbWR+JNdWGCx0W8Myc979eqXPj7wcT3ndWLo= Subject key identifier: 0C:C1:C6:D1:CF:6D:BD:30:8D:DD:5D:24:F6:B1:B7:23:A0:D7:C3:F5 Authority key identifier: 9E:55:32:00:77:69:69:44:B1:61:3C:2E:8C:9C:60:6A:1E:06:EB:79 Certificate issuer: /CN=9e55320077696944b1613c2e8c9c606a1e06eb79 Certificate serial: 01A17A0391E5F2DF6E79FEEECF0B42DA679A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nlUyAHdpaUSxYTwujJxgah4G63k.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/260b61-a348-4d47-92f6-1e0e8b909e34/1/nlUyAHdpaUSxYTwujJxgah4G63k.mft Manifest number: 1AE4 Signing time: Mon 26 Oct 2026 21:00:16 +0000 Manifest this update: Mon 26 Oct 2026 21:00:16 +0000 Manifest next update: Tue 27 Oct 2026 21:00:16 +0000 Files and hashes: 1: 8Eblc7pa_4U4okyHLfqfcyfnWz0.roa (hash: yDyQhyWU2Yy6CbJb1KU7PdxVdmn9PLwPpcooL0C53mY=) 2: AyLKfRccIqVZSZfeJQ1-KG_YPTU.asa (hash: utC08LUwBVA4cVQBYh5JTq1FqYPeFvwHosHL7fDW+sI=) 3: HvJf-bfTg2tiYUvSB0Kj9WjrWi0.roa (hash: Zj79TOXiKACE8B8W/OUq9I83R0d9i1y3XLh2/Gqubpw=) 4: W-sALm5q0yq3QnzfCn9zqwJqvaA.roa (hash: xnIdiawY8eAQvPvkfIlMj6UoPw+J3dJ14IvwIdndhxo=) 5: WDscPdpfG-kb__QIc1556x7o_PY.roa (hash: l96y3WYtqpU/N9iNr6T/BhsvK6KFKMEJ/k50G6U6KZ4=) 6: dDBO-S6Wp6dejnuaBq43TxSUg-A.roa (hash: 4J4YToYV6H1+Y7Dnf4EOV1eYe0uHDGZBia2zslZYn1Y=) 7: emE3k5mpGo837IHnxMhWq1ufD6w.asa (hash: BWnROOAQXj4iBe5c9BYzHZA2Z+H659fm2Nrz/OItGO0=) 8: f9p5fANR3rgdNF9ibKB-GDcgYp0.asa (hash: qcx5yEHomaJVsdDB+zzIUqbgqwQXu1Ph9bsEC6CL9SQ=) 9: nlUyAHdpaUSxYTwujJxgah4G63k.crl (hash: 4S8z8coQ0jnanTRaj9+4ac/e70CuNA0QHQNf4SukU5Y=) 10: ouM5YtdgzmK88LVBLR4anX4lhhA.roa (hash: 8cSgKHpeL4CzJp24fOsiDeOOZHqLgpt9SIcrnZhqRTM=) 11: pG6KdtKifWBBYo7DL8JxMRs-nM0.roa (hash: gKlmdKh10IDFHdiA03gsTAC30YiWDq57ljKUq/ouYK0=) 12: qvhCmUDzNKL8cJBghrHddfWvkhk.roa (hash: UnviboD1YkVxbTanetQc6UpYBMCuKxxYl0kVwOj2pxE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/260b61-a348-4d47-92f6-1e0e8b909e34/1/nlUyAHdpaUSxYTwujJxgah4G63k.crl rsync://rpki.ripe.net/repository/DEFAULT/18/260b61-a348-4d47-92f6-1e0e8b909e34/1/nlUyAHdpaUSxYTwujJxgah4G63k.mft rsync://rpki.ripe.net/repository/DEFAULT/nlUyAHdpaUSxYTwujJxgah4G63k.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Oct 2026 20:00:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a1:7a:03:91:e5:f2:df:6e:79:fe:ee:cf:0b:42:da:67:9a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9e55320077696944b1613c2e8c9c606a1e06eb79 Validity Not Before: Oct 26 21:00:16 2026 GMT Not After : Oct 27 21:00:16 2026 GMT Subject: CN=0cc1c6d1cf6dbd308ddd5d24f6b1b723a0d7c3f5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:ee:83:27:d5:53:47:f0:f1:53:9d:ec:df:95: 6b:f2:17:21:10:42:3b:8d:0c:79:81:6a:65:21:43: 18:2b:b1:4d:a7:ed:4e:b6:fd:32:5e:47:9f:c2:c2: f6:8a:d3:5a:f1:2c:10:88:35:8e:33:88:17:31:1a: 68:78:27:80:d8:7b:55:d0:b0:db:47:49:7a:70:05: 3f:1d:90:cd:a7:9c:95:04:74:fb:48:43:a0:8d:e8: 35:37:5b:06:48:c9:3d:a9:45:68:6a:e6:72:91:e2: 36:b5:61:6b:86:00:af:c9:ba:02:21:58:ea:c2:99: 5f:91:bd:cc:83:cb:87:af:bd:b2:4f:0d:e5:3b:d8: cf:74:3a:38:82:c5:a5:23:61:03:d2:c7:ca:c9:4b: 9f:b2:c3:3e:72:63:43:aa:02:93:af:08:e3:18:2e: 74:0b:ad:93:ae:59:73:57:37:d6:0d:49:9a:d4:8f: de:24:a9:9e:f4:46:99:96:fe:3c:72:39:a0:80:00: 62:0a:01:a0:c6:73:50:46:bb:b3:d4:4d:2b:c5:63: a0:e5:fb:2b:98:bb:d3:db:ac:1e:aa:a1:28:b5:db: 07:a6:95:ca:70:97:98:62:7d:68:8c:0a:6c:ea:80: 84:c7:c9:5d:b6:57:44:4d:0f:cb:95:5e:e4:b9:8d: ef:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:C1:C6:D1:CF:6D:BD:30:8D:DD:5D:24:F6:B1:B7:23:A0:D7:C3:F5 X509v3 Authority Key Identifier: keyid:9E:55:32:00:77:69:69:44:B1:61:3C:2E:8C:9C:60:6A:1E:06:EB:79 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nlUyAHdpaUSxYTwujJxgah4G63k.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/260b61-a348-4d47-92f6-1e0e8b909e34/1/nlUyAHdpaUSxYTwujJxgah4G63k.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/18/260b61-a348-4d47-92f6-1e0e8b909e34/1/nlUyAHdpaUSxYTwujJxgah4G63k.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 70:52:9e:0d:42:a6:87:1d:5f:71:06:1b:ff:16:58:70:88:46: bd:13:f1:e1:e4:65:7f:dd:35:51:2e:a0:67:fc:79:2c:be:9f: 3b:2c:80:fc:e0:47:33:e5:27:9b:00:ca:dd:79:c3:53:9e:33: f3:c9:0a:43:c7:bd:7b:7a:6b:cd:94:de:77:32:da:0c:8f:11: ab:3c:87:47:bd:8e:ff:65:c9:2b:1c:2f:b0:73:32:6e:be:85: 1d:69:12:43:99:85:b6:76:7b:9d:5d:ca:72:04:4e:af:da:42: 93:49:e2:bc:3c:8e:f5:ce:74:e4:fb:dc:88:c8:f4:16:a0:d1: cf:84:34:7b:36:c4:3a:ae:c4:61:cc:23:7f:ad:89:f4:f9:57: 67:6c:ef:0c:26:4a:a9:09:d7:b3:86:0f:09:5a:43:c1:5c:94: e4:8e:78:6b:f2:bf:75:82:31:e6:1b:42:b7:30:a2:57:6e:bc: 82:a8:d9:bc:e7:32:6f:40:81:36:ed:c0:9b:e8:76:55:7a:e6: c5:cc:bc:30:f8:11:c3:61:1c:7d:c5:04:9f:c4:db:4a:87:44: 8d:39:55:e6:e0:a7:6e:2a:6e:66:63:f0:f1:12:62:14:e4:3e: 7e:6f:d1:9d:d7:52:d2:5d:31:b0:64:d5:06:a6:6a:cf:5c:fb: f8:fb:68:3c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaF6A5Hl8t9uef7uzwtC2meaMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDllNTUzMjAwNzc2OTY5NDRiMTYxM2MyZThjOWM2MDZhMWUw NmViNzkwHhcNMjYxMDI2MjEwMDE2WhcNMjYxMDI3MjEwMDE2WjAzMTEwLwYDVQQD EygwY2MxYzZkMWNmNmRiZDMwOGRkZDVkMjRmNmIxYjcyM2EwZDdjM2Y1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv+6DJ9VTR/DxU53s35Vr8hchEEI7 jQx5gWplIUMYK7FNp+1Otv0yXkefwsL2itNa8SwQiDWOM4gXMRpoeCeA2HtV0LDb R0l6cAU/HZDNp5yVBHT7SEOgjeg1N1sGSMk9qUVoauZykeI2tWFrhgCvyboCIVjq wplfkb3Mg8uHr72yTw3lO9jPdDo4gsWlI2ED0sfKyUufssM+cmNDqgKTrwjjGC50 C62TrllzVzfWDUma1I/eJKme9EaZlv48cjmggABiCgGgxnNQRruz1E0rxWOg5fsr mLvT26weqqEotdsHppXKcJeYYn1ojAps6oCEx8ldtldETQ/LlV7kuY3vQQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAzBxtHPbb0wjd1dJPaxtyOg18P1MB8GA1UdIwQY MBaAFJ5VMgB3aWlEsWE8LoycYGoeBut5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbmxVeUFIZHBhVVN4WVR3dWpKeGdhaDRHNjNrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOC8yNjBiNjEtYTM0OC00ZDQ3LTkyZjYt MWUwZThiOTA5ZTM0LzEvbmxVeUFIZHBhVVN4WVR3dWpKeGdhaDRHNjNrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xOC8yNjBiNjEtYTM0OC00ZDQ3LTkyZjYtMWUwZThiOTA5ZTM0 LzEvbmxVeUFIZHBhVVN4WVR3dWpKeGdhaDRHNjNrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcFKeDUKm hx1fcQYb/xZYcIhGvRPx4eRlf901US6gZ/x5LL6fOyyA/OBHM+UnmwDK3XnDU54z 88kKQ8e9e3przZTedzLaDI8RqzyHR72O/2XJKxwvsHMybr6FHWkSQ5mFtnZ7nV3K cgROr9pCk0nivDyO9c505PvciMj0FqDRz4Q0ezbEOq7EYcwjf62J9PlXZ2zvDCZK qQnXs4YPCVpDwVyU5I54a/K/dYIx5htCtzCiV268gqjZvOcyb0CBNu3Am+h2VXrm xcy8MPgRw2EcfcUEn8TbSodEjTlV5uCnbipuZmPw8RJiFOQ+fm/RnddS0l0xsGTV BqZqz1z7+PtoPA== -----END CERTIFICATE-----Generated at Tue Oct 27 01:54:41 2026 by rpki-client