$ rpki-client -vvvf rsync.krill.nlnetlabs.nl/repo/nlnetlabs/1/DC780D9935DABC701A4C4832B16C11D7743C399A.mft File: DC780D9935DABC701A4C4832B16C11D7743C399A.mft (raw, json) Hash identifier: TaLxNWVncXV3qF9lyTkFTOUrTyoVRJNJf+tD6txvJmA= Subject key identifier: BB:ED:06:E0:F2:51:C8:2A:AA:25:6B:AD:EB:EE:D8:BB:7A:2E:3A:70 Authority key identifier: DC:78:0D:99:35:DA:BC:70:1A:4C:48:32:B1:6C:11:D7:74:3C:39:9A Certificate issuer: /CN=dc780d9935dabc701a4c4832b16c11d7743c399a Certificate serial: 6DCBA3EA43CFE50CD16189ECF2BF95540FB2101A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3HgNmTXavHAaTEgysWwR13Q8OZo.cer Subject info access: rsync://rsync.krill.nlnetlabs.nl/repo/nlnetlabs/1/DC780D9935DABC701A4C4832B16C11D7743C399A.mft Manifest number: 0245 Signing time: Tue 06 Oct 2026 07:48:15 +0000 Manifest this update: Tue 06 Oct 2026 07:43:15 +0000 Manifest next update: Wed 07 Oct 2026 10:18:15 +0000 Files and hashes: 1: 326130343a623930343a373230303a3a2f34302d3430203d3e20323131333231.roa (hash: refEY6cMSdDY7cBVUX5w6R5vf51PxokJ+N8DMMimo3o=) 2: 326130343a623930303a3530303a3a2f34302d3430203d3e203630313331.roa (hash: aHSU2LAP9+uQoMkIpvrqOzq9aYzl4H0ZJ31M+HGxbv0=) 3: 326130343a623930303a3a2f34302d3430203d3e2038353837.roa (hash: C+7VhiatX/AuDzxhoKtyvY9d94VTo0QlL+iBBqSiSk8=) 4: 3138352e34392e3134332e302f32342d3234203d3e20323131333231.roa (hash: 0B5YOvITIZWZRxiAsBfwVFBJO8A9+rknJ70VrZXbmhM=) 5: DC780D9935DABC701A4C4832B16C11D7743C399A.crl (hash: /WornUm4oQz9GoS8ALbBD2iRYv1kt5cP6tzgfpYhTPw=) 6: 3138352e34392e3134322e302f32332d3233203d3e20323131333231.roa (hash: G71RBaKhsjP596XjbfAcbZmTzgSOwVARGZ/mPeB9am8=) 7: 326130343a623930353a3a2f34382d3438203d3e203136353039.roa (hash: d+iw2diCkJRaNGhzIf4J/JKw8L1IDPPlPbWg6NjYiQ8=) 8: 326130343a623930303a3a2f33302d3332203d3e2038353837.roa (hash: mcRkbX+EcmuVG5kbogYs1kTfFjmT6GSDRiWlit7LIEo=) 9: 326130343a623930373a3a2f34382d3438203d3e2030.roa (hash: pEkraM4NhbgBsFbDwa7w6tJcsCMwH3uOz0vykIUzTk8=) 10: 3138352e34392e3134332e302f32342d3234203d3e203630313331.roa (hash: 3y7Jbg3sm1uifLkJV88tgfg6D6rTEYYvAHPNscUUhHA=) 11: C8623AA6C30FA8E058243708F5672D7960E52389.cer (hash: xh+MW2FduGLhuo30+/bFrTnjBprE+rX9TK+QGtrFq9E=) 12: 3138352e34392e3134302e302f32332d3233203d3e2038353837.roa (hash: U8+OIXzaopDuaYf7hsd7liluEK65HTMfxtzOs2eUutU=) 13: 326130343a623930373a3a2f34372d3437203d3e20323131333231.roa (hash: q5XBQbeSajkFemFHOP7sJXFLQua3ROC9i4L+KFjqA2Y=) 14: 326130343a623930363a3a2f34382d3438203d3e2030.roa (hash: eiOsAFzUoO5n+xOw6ZqDfb1W9mjnMVvG3lh8Uszxqbc=) 15: 326130343a623930303a3a2f33302d3330203d3e2038353837.roa (hash: YVqDFSJM9BpzA7j/lmc/Km9kXBCWwBuBJnXVpd3c0oA=) 16: 3138352e34392e3134322e302f32342d3234203d3e2030.roa (hash: +h5nxp3r86DxkM+mEV1xj5BP7LH8Lp8uZ6CT1Hi1E54=) 17: 326130343a623930343a3a2f34382d3438203d3e20323131333231.roa (hash: uEPfzD+wbnhTwsVWW/UrDfMoUMKBuHi0vPl0IGNr7n4=) 18: 326130343a623930323a3a2f34382d3438203d3e20323131333231.roa (hash: DvRjC5YVaO6hAiGHU5zPxy3o6I0+1biPcChDZYr62qk=) Validation: OK Signature path: rsync://rsync.krill.nlnetlabs.nl/repo/nlnetlabs/1/DC780D9935DABC701A4C4832B16C11D7743C399A.crl rsync://rsync.krill.nlnetlabs.nl/repo/nlnetlabs/1/DC780D9935DABC701A4C4832B16C11D7743C399A.mft rsync://rpki.ripe.net/repository/DEFAULT/3HgNmTXavHAaTEgysWwR13Q8OZo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 07 Oct 2026 08:00:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6d:cb:a3:ea:43:cf:e5:0c:d1:61:89:ec:f2:bf:95:54:0f:b2:10:1a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dc780d9935dabc701a4c4832b16c11d7743c399a Validity Not Before: Oct 6 07:43:15 2026 GMT Not After : Oct 7 10:18:15 2026 GMT Subject: CN=BBED06E0F251C82AAA256BADEBEED8BB7A2E3A70 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:59:99:fa:3a:71:7d:c2:06:11:6f:86:d1:dc: e8:ca:56:f0:c7:e9:d3:58:2a:95:9f:98:1c:88:92: 72:77:15:08:4a:dc:73:c6:94:ec:4f:f1:0b:d8:2d: 81:5c:21:98:65:20:03:5a:ca:dc:d5:65:fd:f3:69: b6:92:23:5e:d7:7b:cd:07:9c:c8:6b:c7:1f:24:1b: 53:98:dc:9a:c7:b9:ae:63:91:45:7f:b3:52:db:7a: 6b:bf:0a:53:36:7a:81:bf:15:41:f5:29:11:25:6e: 0f:f8:30:b3:b3:3b:24:57:56:64:97:4f:bc:fa:4b: 0a:b0:d9:32:62:2c:e0:d9:56:3f:b5:93:53:c9:67: 0b:7a:71:7d:93:1e:80:27:6a:df:e5:a8:59:39:6c: 3d:e6:23:b3:53:ca:02:51:d2:0d:7e:19:7f:a2:eb: 8f:5e:3a:5a:98:f0:41:0c:1a:da:70:11:25:e2:6b: 64:8a:34:41:5f:ee:cf:6d:23:52:e0:dd:7b:03:ea: 0f:32:b4:ee:f7:59:bf:cc:7b:62:ac:bc:ef:c6:ba: 36:c7:45:87:9a:d3:0b:70:b0:45:30:df:44:4e:27: 0c:fc:b5:f6:68:a9:2c:f1:af:10:68:c9:e7:e5:98: 0c:d5:6d:f9:13:c7:51:2d:e3:1f:91:3a:c8:2f:a7: 8d:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:ED:06:E0:F2:51:C8:2A:AA:25:6B:AD:EB:EE:D8:BB:7A:2E:3A:70 X509v3 Authority Key Identifier: keyid:DC:78:0D:99:35:DA:BC:70:1A:4C:48:32:B1:6C:11:D7:74:3C:39:9A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.krill.nlnetlabs.nl/repo/nlnetlabs/1/DC780D9935DABC701A4C4832B16C11D7743C399A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3HgNmTXavHAaTEgysWwR13Q8OZo.cer Subject Information Access: Signed Object - URI:rsync://rsync.krill.nlnetlabs.nl/repo/nlnetlabs/1/DC780D9935DABC701A4C4832B16C11D7743C399A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 25:80:df:fa:df:06:0a:33:43:d6:26:38:a8:1d:7f:ba:b5:46: 50:15:ee:3c:c5:f1:fc:75:b4:16:5a:fb:a4:16:ab:7f:e0:03: 16:ee:31:3c:06:c0:f9:7a:b1:ce:5e:1a:05:a7:4b:9d:83:42: 2b:9e:ae:0a:12:17:19:63:8a:60:a7:1f:85:b7:95:a6:1b:f8: b6:53:4f:9f:62:79:ec:a6:ab:49:59:58:27:20:cf:82:19:ea: 5f:e7:86:93:8b:9a:c8:7f:c7:c6:3f:8c:83:a8:4b:21:fe:11: 15:be:25:3a:32:fa:a1:48:07:28:3d:66:1b:12:69:88:33:2a: c6:03:e2:76:fa:15:94:0c:ef:8a:dc:76:6e:d8:83:2e:4e:c6: 14:8c:1e:b7:d1:30:29:76:4e:53:68:c6:88:84:b3:8b:a2:cf: 37:a4:fc:c4:5e:f8:67:9d:9d:b1:14:83:1b:22:16:48:0d:c7: 27:aa:e8:81:14:8a:eb:fb:dc:29:8f:13:d4:0d:18:42:52:0f: e0:8f:e2:4b:f9:ff:61:94:ce:f6:d7:e6:98:a6:57:ca:da:29: f3:0f:88:56:57:d5:ab:a6:86:78:7b:e3:f5:e0:28:51:1b:90: b3:62:0f:e4:df:0f:8d:1e:35:83:db:99:0c:6a:69:1f:74:3a: ee:95:fd:d5 -----BEGIN CERTIFICATE----- MIIE8TCCA9mgAwIBAgIUbcuj6kPP5QzRYYns8r+VVA+yEBowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoZGM3ODBkOTkzNWRhYmM3MDFhNGM0ODMyYjE2YzExZDc3 NDNjMzk5YTAeFw0yNjEwMDYwNzQzMTVaFw0yNjEwMDcxMDE4MTVaMDMxMTAvBgNV BAMTKEJCRUQwNkUwRjI1MUM4MkFBQTI1NkJBREVCRUVEOEJCN0EyRTNBNzAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDeWZn6OnF9wgYRb4bR3OjKVvDH 6dNYKpWfmByIknJ3FQhK3HPGlOxP8QvYLYFcIZhlIANaytzVZf3zabaSI17Xe80H nMhrxx8kG1OY3JrHua5jkUV/s1Lbemu/ClM2eoG/FUH1KRElbg/4MLOzOyRXVmSX T7z6Swqw2TJiLODZVj+1k1PJZwt6cX2THoAnat/lqFk5bD3mI7NTygJR0g1+GX+i 649eOlqY8EEMGtpwESXia2SKNEFf7s9tI1Lg3XsD6g8ytO73Wb/Me2KsvO/GujbH RYea0wtwsEUw30ROJwz8tfZoqSzxrxBoyeflmAzVbfkTx1Et4x+ROsgvp40/AgMB AAGjggH7MIIB9zAdBgNVHQ4EFgQUu+0G4PJRyCqqJWut6+7Yu3ouOnAwHwYDVR0j BBgwFoAU3HgNmTXavHAaTEgysWwR13Q8OZowDgYDVR0PAQH/BAQDAgeAMG8GA1Ud HwRoMGYwZKBioGCGXnJzeW5jOi8vcnN5bmMua3JpbGwubmxuZXRsYWJzLm5sL3Jl cG8vbmxuZXRsYWJzLzEvREM3ODBEOTkzNURBQkM3MDFBNEM0ODMyQjE2QzExRDc3 NDNDMzk5QS5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzov L3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzNIZ05tVFhhdkhBYVRF Z3lzV3dSMTNROE9aby5jZXIwegYIKwYBBQUHAQsEbjBsMGoGCCsGAQUFBzALhl5y c3luYzovL3JzeW5jLmtyaWxsLm5sbmV0bGFicy5ubC9yZXBvL25sbmV0bGFicy8x L0RDNzgwRDk5MzVEQUJDNzAxQTRDNDgzMkIxNkMxMUQ3NzQzQzM5OUEubWZ0MBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgAB BQAwBgQCAAIFADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUA A4IBAQAlgN/63wYKM0PWJjioHX+6tUZQFe48xfH8dbQWWvukFqt/4AMW7jE8BsD5 erHOXhoFp0udg0Irnq4KEhcZY4pgpx+Ft5WmG/i2U0+fYnnspqtJWVgnIM+CGepf 54aTi5rIf8fGP4yDqEsh/hEVviU6MvqhSAcoPWYbEmmIMyrGA+J2+hWUDO+K3HZu 2IMuTsYUjB630TApdk5TaMaIhLOLos83pPzEXvhnnZ2xFIMbIhZIDccnquiBFIrr +9wpjxPUDRhCUg/gj+JL+f9hlM721+aYplfK2inzD4hWV9WrpoZ4e+P14ChRG5Cz Yg/k3w+NHjWD25kMamkfdDrulf3V -----END CERTIFICATE-----Generated at Tue Oct 6 15:14:55 2026 by rpki-client