$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/18/260b61-a348-4d47-92f6-1e0e8b909e34/1/nlUyAHdpaUSxYTwujJxgah4G63k.mft File: nlUyAHdpaUSxYTwujJxgah4G63k.mft (raw, json) Hash identifier: ou5GSQ9AnDFgMtlj9JGQgpG8/V26v2D20S6/3JOHJGg= Subject key identifier: 8D:E8:72:E8:62:AE:37:46:B7:96:E7:C6:49:32:29:54:7D:0F:F9:F8 Authority key identifier: 9E:55:32:00:77:69:69:44:B1:61:3C:2E:8C:9C:60:6A:1E:06:EB:79 Certificate issuer: /CN=9e55320077696944b1613c2e8c9c606a1e06eb79 Certificate serial: 01A037824B12412449274518677FCB5AC0D9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nlUyAHdpaUSxYTwujJxgah4G63k.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/260b61-a348-4d47-92f6-1e0e8b909e34/1/nlUyAHdpaUSxYTwujJxgah4G63k.mft Manifest number: 1A3D Signing time: Tue 25 Aug 2026 06:01:20 +0000 Manifest this update: Tue 25 Aug 2026 06:01:20 +0000 Manifest next update: Wed 26 Aug 2026 06:01:20 +0000 Files and hashes: 1: 8Eblc7pa_4U4okyHLfqfcyfnWz0.roa (hash: yDyQhyWU2Yy6CbJb1KU7PdxVdmn9PLwPpcooL0C53mY=) 2: AyLKfRccIqVZSZfeJQ1-KG_YPTU.asa (hash: utC08LUwBVA4cVQBYh5JTq1FqYPeFvwHosHL7fDW+sI=) 3: HvJf-bfTg2tiYUvSB0Kj9WjrWi0.roa (hash: Zj79TOXiKACE8B8W/OUq9I83R0d9i1y3XLh2/Gqubpw=) 4: W-sALm5q0yq3QnzfCn9zqwJqvaA.roa (hash: xnIdiawY8eAQvPvkfIlMj6UoPw+J3dJ14IvwIdndhxo=) 5: WDscPdpfG-kb__QIc1556x7o_PY.roa (hash: l96y3WYtqpU/N9iNr6T/BhsvK6KFKMEJ/k50G6U6KZ4=) 6: dDBO-S6Wp6dejnuaBq43TxSUg-A.roa (hash: 4J4YToYV6H1+Y7Dnf4EOV1eYe0uHDGZBia2zslZYn1Y=) 7: emE3k5mpGo837IHnxMhWq1ufD6w.asa (hash: BWnROOAQXj4iBe5c9BYzHZA2Z+H659fm2Nrz/OItGO0=) 8: f9p5fANR3rgdNF9ibKB-GDcgYp0.asa (hash: qcx5yEHomaJVsdDB+zzIUqbgqwQXu1Ph9bsEC6CL9SQ=) 9: nlUyAHdpaUSxYTwujJxgah4G63k.crl (hash: QAgtMPb2/xh/kX1rQ7DAZos8tRqW49kG65KQaSiEiaI=) 10: ouM5YtdgzmK88LVBLR4anX4lhhA.roa (hash: 8cSgKHpeL4CzJp24fOsiDeOOZHqLgpt9SIcrnZhqRTM=) 11: pG6KdtKifWBBYo7DL8JxMRs-nM0.roa (hash: gKlmdKh10IDFHdiA03gsTAC30YiWDq57ljKUq/ouYK0=) 12: qvhCmUDzNKL8cJBghrHddfWvkhk.roa (hash: UnviboD1YkVxbTanetQc6UpYBMCuKxxYl0kVwOj2pxE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/260b61-a348-4d47-92f6-1e0e8b909e34/1/nlUyAHdpaUSxYTwujJxgah4G63k.crl rsync://rpki.ripe.net/repository/DEFAULT/18/260b61-a348-4d47-92f6-1e0e8b909e34/1/nlUyAHdpaUSxYTwujJxgah4G63k.mft rsync://rpki.ripe.net/repository/DEFAULT/nlUyAHdpaUSxYTwujJxgah4G63k.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 26 Aug 2026 06:01:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a0:37:82:4b:12:41:24:49:27:45:18:67:7f:cb:5a:c0:d9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9e55320077696944b1613c2e8c9c606a1e06eb79 Validity Not Before: Aug 25 06:01:20 2026 GMT Not After : Aug 26 06:01:20 2026 GMT Subject: CN=8de872e862ae3746b796e7c6493229547d0ff9f8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:60:28:41:3f:d6:75:7f:9d:7d:85:e1:53:c7: 2a:87:51:b9:3c:f2:88:47:56:1e:c2:44:fc:46:08: 27:3d:2b:dc:b4:6f:93:95:88:5f:41:79:e7:9e:b8: c0:39:61:08:95:63:ff:88:10:d3:90:1b:0f:38:5d: ce:89:50:79:f6:5e:3d:68:3a:a7:c1:d9:fd:78:85: 6a:5b:24:b5:90:14:99:3f:c2:f9:4f:5a:63:a8:2c: 4a:a4:af:9b:d1:18:6a:fe:9d:98:99:b1:9b:3a:3f: 91:ca:39:ee:3c:66:a2:0b:c8:9d:f8:cf:67:e0:5c: cb:cf:e2:11:02:7f:43:69:17:a3:2a:c1:9d:6f:0f: 8d:57:4b:51:1a:70:28:98:59:b4:57:cc:76:a3:f1: 2a:88:f3:58:29:e1:14:5c:df:cd:54:bc:35:d2:0e: 6f:f1:c7:fc:9f:e2:91:8d:b2:ad:06:fe:68:ca:33: 89:79:9c:e4:49:ea:f1:27:e9:f9:32:73:d8:9a:54: c4:00:b4:3a:fa:a6:11:9e:76:c7:ec:82:9e:0d:fe: 72:a5:5f:4d:a4:6d:02:e6:8b:7a:d2:3f:e2:0a:5a: cb:5a:ba:34:db:ec:e4:c1:ac:3b:6e:c3:66:79:11: a8:10:36:7e:fb:81:21:ed:64:d4:84:25:75:fd:8b: 64:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:E8:72:E8:62:AE:37:46:B7:96:E7:C6:49:32:29:54:7D:0F:F9:F8 X509v3 Authority Key Identifier: keyid:9E:55:32:00:77:69:69:44:B1:61:3C:2E:8C:9C:60:6A:1E:06:EB:79 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nlUyAHdpaUSxYTwujJxgah4G63k.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/260b61-a348-4d47-92f6-1e0e8b909e34/1/nlUyAHdpaUSxYTwujJxgah4G63k.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/18/260b61-a348-4d47-92f6-1e0e8b909e34/1/nlUyAHdpaUSxYTwujJxgah4G63k.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 93:2f:3f:95:26:20:3f:d4:98:41:f3:f7:f6:13:31:d7:01:32: 13:2c:6f:5b:6d:7a:27:4e:57:0b:7f:26:d3:fd:02:43:6f:1f: 2b:9e:67:e8:7d:3e:08:9a:17:f9:57:ad:7c:3c:ce:db:65:f7: da:3f:6c:b3:9e:d5:93:9c:d1:94:43:30:35:a6:80:23:e3:20: 9c:2e:64:9c:ac:93:0b:94:e9:64:13:14:5b:af:61:1e:5f:d5: ab:72:57:b4:19:c0:8a:14:64:ca:47:0f:f0:0c:b4:8d:88:cd: 69:23:ea:0a:03:45:a6:74:7d:07:f2:a9:e9:e6:3f:f7:37:66: bf:24:7e:c1:2e:d8:50:72:bb:77:77:37:46:13:e6:ea:20:5c: 38:bd:24:78:45:44:f7:28:d9:0c:c1:5a:d2:5c:9e:29:85:84: 96:b7:a5:77:12:8e:c1:74:97:0a:ce:18:71:8d:61:5e:30:d8: b4:18:d5:1a:18:77:b6:e3:ec:6d:8a:db:e5:3e:7f:ef:94:d8: d3:42:79:99:2b:8a:b9:72:b5:92:07:28:96:56:f9:3d:4a:72: 3d:56:50:0e:52:b9:ca:e1:2e:58:1a:77:18:ea:9f:f1:96:95: 11:67:5a:0b:ca:26:8d:39:60:a1:3a:f5:dd:50:11:9e:ca:3b: f3:88:42:62 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaA3gksSQSRJJ0UYZ3/LWsDZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDllNTUzMjAwNzc2OTY5NDRiMTYxM2MyZThjOWM2MDZhMWUw NmViNzkwHhcNMjYwODI1MDYwMTIwWhcNMjYwODI2MDYwMTIwWjAzMTEwLwYDVQQD Eyg4ZGU4NzJlODYyYWUzNzQ2Yjc5NmU3YzY0OTMyMjk1NDdkMGZmOWY4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvWAoQT/WdX+dfYXhU8cqh1G5PPKI R1YewkT8RggnPSvctG+TlYhfQXnnnrjAOWEIlWP/iBDTkBsPOF3OiVB59l49aDqn wdn9eIVqWyS1kBSZP8L5T1pjqCxKpK+b0Rhq/p2YmbGbOj+RyjnuPGaiC8id+M9n 4FzLz+IRAn9DaRejKsGdbw+NV0tRGnAomFm0V8x2o/EqiPNYKeEUXN/NVLw10g5v 8cf8n+KRjbKtBv5oyjOJeZzkSerxJ+n5MnPYmlTEALQ6+qYRnnbH7IKeDf5ypV9N pG0C5ot60j/iClrLWro02+zkwaw7bsNmeRGoEDZ++4Eh7WTUhCV1/YtkdQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFI3ocuhirjdGt5bnxkkyKVR9D/n4MB8GA1UdIwQY MBaAFJ5VMgB3aWlEsWE8LoycYGoeBut5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbmxVeUFIZHBhVVN4WVR3dWpKeGdhaDRHNjNrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOC8yNjBiNjEtYTM0OC00ZDQ3LTkyZjYt MWUwZThiOTA5ZTM0LzEvbmxVeUFIZHBhVVN4WVR3dWpKeGdhaDRHNjNrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xOC8yNjBiNjEtYTM0OC00ZDQ3LTkyZjYtMWUwZThiOTA5ZTM0 LzEvbmxVeUFIZHBhVVN4WVR3dWpKeGdhaDRHNjNrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAky8/lSYg P9SYQfP39hMx1wEyEyxvW216J05XC38m0/0CQ28fK55n6H0+CJoX+VetfDzO22X3 2j9ss57Vk5zRlEMwNaaAI+MgnC5knKyTC5TpZBMUW69hHl/Vq3JXtBnAihRkykcP 8Ay0jYjNaSPqCgNFpnR9B/Kp6eY/9zdmvyR+wS7YUHK7d3c3RhPm6iBcOL0keEVE 9yjZDMFa0lyeKYWElreldxKOwXSXCs4YcY1hXjDYtBjVGhh3tuPsbYrb5T5/75TY 00J5mSuKuXK1kgcollb5PUpyPVZQDlK5yuEuWBp3GOqf8ZaVEWdaC8omjTlgoTr1 3VARnso784hCYg== -----END CERTIFICATE-----Generated at Tue Aug 25 15:37:40 2026 by rpki-client