$ rpki-client -vvf rsync.krill.nlnetlabs.nl/repo/nlnetlabs/1/DC780D9935DABC701A4C4832B16C11D7743C399A.mft File: DC780D9935DABC701A4C4832B16C11D7743C399A.mft (raw, json) Hash identifier: HzzaKQBKGkCRMDPNQhySmVI5A2Kr44nbmJfYqIkSpiA= Subject key identifier: 8D:FA:C2:1C:B2:91:33:0B:7B:A2:C1:BA:CA:0C:77:6B:F5:76:48:52 Authority key identifier: DC:78:0D:99:35:DA:BC:70:1A:4C:48:32:B1:6C:11:D7:74:3C:39:9A Certificate issuer: /CN=dc780d9935dabc701a4c4832b16c11d7743c399a Certificate serial: 64CFB385173BC9EFCA058E8E316EB70C9A33EFE6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3HgNmTXavHAaTEgysWwR13Q8OZo.cer Subject info access: rsync://rsync.krill.nlnetlabs.nl/repo/nlnetlabs/1/DC780D9935DABC701A4C4832B16C11D7743C399A.mft Manifest number: 01FF Signing time: Sat 15 Aug 2026 09:55:42 +0000 Manifest this update: Sat 15 Aug 2026 09:50:42 +0000 Manifest next update: Sun 16 Aug 2026 11:00:42 +0000 Files and hashes: 1: 326130343a623930373a3a2f34382d3438203d3e2030.roa (hash: pEkraM4NhbgBsFbDwa7w6tJcsCMwH3uOz0vykIUzTk8=) 2: 326130343a623930373a3a2f34372d3437203d3e20323131333231.roa (hash: q5XBQbeSajkFemFHOP7sJXFLQua3ROC9i4L+KFjqA2Y=) 3: 3138352e34392e3134302e302f32332d3233203d3e2038353837.roa (hash: U8+OIXzaopDuaYf7hsd7liluEK65HTMfxtzOs2eUutU=) 4: 326130343a623930363a3a2f34382d3438203d3e2030.roa (hash: eiOsAFzUoO5n+xOw6ZqDfb1W9mjnMVvG3lh8Uszxqbc=) 5: 3138352e34392e3134332e302f32342d3234203d3e20323131333231.roa (hash: 0B5YOvITIZWZRxiAsBfwVFBJO8A9+rknJ70VrZXbmhM=) 6: 326130343a623930353a3a2f34382d3438203d3e203136353039.roa (hash: d+iw2diCkJRaNGhzIf4J/JKw8L1IDPPlPbWg6NjYiQ8=) 7: DC780D9935DABC701A4C4832B16C11D7743C399A.crl (hash: v3n8LstQ30GaWioHXMw0+nJwk5nOScsHKpAxYno7OOM=) 8: 3138352e34392e3134322e302f32342d3234203d3e2030.roa (hash: +h5nxp3r86DxkM+mEV1xj5BP7LH8Lp8uZ6CT1Hi1E54=) 9: C8623AA6C30FA8E058243708F5672D7960E52389.cer (hash: xh+MW2FduGLhuo30+/bFrTnjBprE+rX9TK+QGtrFq9E=) 10: 326130343a623930323a3a2f34382d3438203d3e20323131333231.roa (hash: DvRjC5YVaO6hAiGHU5zPxy3o6I0+1biPcChDZYr62qk=) 11: 326130343a623930343a373230303a3a2f34302d3430203d3e20323131333231.roa (hash: refEY6cMSdDY7cBVUX5w6R5vf51PxokJ+N8DMMimo3o=) 12: 326130343a623930343a3a2f34382d3438203d3e20323131333231.roa (hash: uEPfzD+wbnhTwsVWW/UrDfMoUMKBuHi0vPl0IGNr7n4=) 13: 3138352e34392e3134322e302f32332d3233203d3e20323131333231.roa (hash: G71RBaKhsjP596XjbfAcbZmTzgSOwVARGZ/mPeB9am8=) 14: 326130343a623930303a3a2f33302d3330203d3e2038353837.roa (hash: YVqDFSJM9BpzA7j/lmc/Km9kXBCWwBuBJnXVpd3c0oA=) 15: 326130343a623930303a3a2f33302d3332203d3e2038353837.roa (hash: mcRkbX+EcmuVG5kbogYs1kTfFjmT6GSDRiWlit7LIEo=) 16: 3138352e34392e3134332e302f32342d3234203d3e203630313331.roa (hash: 3y7Jbg3sm1uifLkJV88tgfg6D6rTEYYvAHPNscUUhHA=) Validation: OK Signature path: rsync://rsync.krill.nlnetlabs.nl/repo/nlnetlabs/1/DC780D9935DABC701A4C4832B16C11D7743C399A.crl rsync://rsync.krill.nlnetlabs.nl/repo/nlnetlabs/1/DC780D9935DABC701A4C4832B16C11D7743C399A.mft rsync://rpki.ripe.net/repository/DEFAULT/3HgNmTXavHAaTEgysWwR13Q8OZo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 16 Aug 2026 11:00:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 64:cf:b3:85:17:3b:c9:ef:ca:05:8e:8e:31:6e:b7:0c:9a:33:ef:e6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dc780d9935dabc701a4c4832b16c11d7743c399a Validity Not Before: Aug 15 09:50:42 2026 GMT Not After : Aug 16 11:00:42 2026 GMT Subject: CN=8DFAC21CB291330B7BA2C1BACA0C776BF5764852 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:8d:e1:69:da:ca:2f:ce:89:bb:d4:d7:b0:e8: 94:46:9e:60:fd:16:fd:db:d6:5d:db:ef:2c:e8:30: 4b:cd:40:a3:7c:57:5a:84:7e:ec:1a:fc:ca:5f:2a: 42:fd:25:68:22:b8:a6:c4:e2:36:93:8d:6f:78:4c: 58:0d:e3:a3:6f:6f:a7:cc:4b:a8:3d:1f:41:63:07: 34:0b:49:9f:fc:92:a9:83:6b:28:46:42:b9:92:74: 36:37:33:b8:db:b7:35:a1:28:14:8a:97:d3:5a:fe: 90:46:a3:76:1f:9b:0f:c0:fb:a5:ef:ec:01:89:4b: 7d:cd:fe:e5:b9:09:8a:7c:41:96:da:c1:66:c2:2d: 10:ea:a2:4a:28:84:36:a1:54:65:45:03:74:2e:f9: 8b:4e:bc:1a:d5:88:b9:64:22:98:c2:a0:8a:03:68: 1d:d4:6f:08:96:49:f6:0e:d9:f3:53:6a:4e:0c:96: 02:dd:41:be:a6:6e:72:40:c9:64:4a:6a:78:08:e7: 08:95:9a:ef:36:34:5c:e5:43:f9:5e:38:98:0d:e9: 24:db:8c:f2:1c:8b:36:6f:62:78:3d:77:18:30:3c: 40:86:ee:ab:ac:9a:a6:58:cc:07:94:0b:46:0d:73: ba:77:e3:d5:e0:af:ca:83:14:03:93:34:cc:5c:e3: ab:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:FA:C2:1C:B2:91:33:0B:7B:A2:C1:BA:CA:0C:77:6B:F5:76:48:52 X509v3 Authority Key Identifier: keyid:DC:78:0D:99:35:DA:BC:70:1A:4C:48:32:B1:6C:11:D7:74:3C:39:9A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.krill.nlnetlabs.nl/repo/nlnetlabs/1/DC780D9935DABC701A4C4832B16C11D7743C399A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3HgNmTXavHAaTEgysWwR13Q8OZo.cer Subject Information Access: Signed Object - URI:rsync://rsync.krill.nlnetlabs.nl/repo/nlnetlabs/1/DC780D9935DABC701A4C4832B16C11D7743C399A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 98:f3:fc:ca:18:36:6d:0b:d8:e3:fd:05:3d:f4:39:5d:6c:c1: 3e:b7:3f:df:11:09:33:27:1f:6d:af:3f:af:e5:35:6b:ab:b4: 16:1d:89:a6:d5:ac:86:87:d2:de:46:f1:60:09:66:e2:6b:dd: 81:9b:3c:89:a0:3a:fa:03:10:2b:90:6d:0d:e1:87:fd:cb:2d: 7c:fb:da:a6:e5:4f:50:87:fd:a8:fa:a1:cd:dd:d6:9b:27:17: 76:89:87:7e:ca:f5:c5:65:1c:cf:c4:5f:27:eb:e0:15:a2:bb: 58:71:db:26:35:72:04:6a:83:23:8c:e5:dd:3e:f1:68:fb:c7: 6c:de:95:c4:35:e0:87:d3:71:5f:42:fa:b9:39:a3:e3:76:d2: d0:b1:33:63:a5:ab:18:79:11:3b:ad:94:a7:2a:17:a5:40:08: b2:be:6a:31:0d:5f:ed:e9:f7:73:a6:a1:d0:cf:3a:a8:30:ee: 2b:55:9b:b9:aa:41:17:0f:ed:65:b5:3b:ec:83:98:a6:a8:74: c6:94:fa:2b:f7:de:c5:b3:bc:00:1b:c1:27:18:6c:8d:6f:2f: 04:de:67:87:43:b7:9a:91:b4:c9:af:c2:82:5c:04:75:41:09: d0:5c:d4:4b:37:67:f3:ca:5d:b6:73:4d:0c:67:22:71:e9:0f: d4:9e:6e:e5 -----BEGIN CERTIFICATE----- MIIE8TCCA9mgAwIBAgIUZM+zhRc7ye/KBY6OMW63DJoz7+YwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoZGM3ODBkOTkzNWRhYmM3MDFhNGM0ODMyYjE2YzExZDc3 NDNjMzk5YTAeFw0yNjA4MTUwOTUwNDJaFw0yNjA4MTYxMTAwNDJaMDMxMTAvBgNV BAMTKDhERkFDMjFDQjI5MTMzMEI3QkEyQzFCQUNBMEM3NzZCRjU3NjQ4NTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC9jeFp2sovzom71New6JRGnmD9 Fv3b1l3b7yzoMEvNQKN8V1qEfuwa/MpfKkL9JWgiuKbE4jaTjW94TFgN46Nvb6fM S6g9H0FjBzQLSZ/8kqmDayhGQrmSdDY3M7jbtzWhKBSKl9Na/pBGo3Yfmw/A+6Xv 7AGJS33N/uW5CYp8QZbawWbCLRDqokoohDahVGVFA3Qu+YtOvBrViLlkIpjCoIoD aB3UbwiWSfYO2fNTak4MlgLdQb6mbnJAyWRKangI5wiVmu82NFzlQ/leOJgN6STb jPIcizZvYng9dxgwPECG7qusmqZYzAeUC0YNc7p349Xgr8qDFAOTNMxc46vZAgMB AAGjggH7MIIB9zAdBgNVHQ4EFgQUjfrCHLKRMwt7osG6ygx3a/V2SFIwHwYDVR0j BBgwFoAU3HgNmTXavHAaTEgysWwR13Q8OZowDgYDVR0PAQH/BAQDAgeAMG8GA1Ud HwRoMGYwZKBioGCGXnJzeW5jOi8vcnN5bmMua3JpbGwubmxuZXRsYWJzLm5sL3Jl cG8vbmxuZXRsYWJzLzEvREM3ODBEOTkzNURBQkM3MDFBNEM0ODMyQjE2QzExRDc3 NDNDMzk5QS5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzov L3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzNIZ05tVFhhdkhBYVRF Z3lzV3dSMTNROE9aby5jZXIwegYIKwYBBQUHAQsEbjBsMGoGCCsGAQUFBzALhl5y c3luYzovL3JzeW5jLmtyaWxsLm5sbmV0bGFicy5ubC9yZXBvL25sbmV0bGFicy8x L0RDNzgwRDk5MzVEQUJDNzAxQTRDNDgzMkIxNkMxMUQ3NzQzQzM5OUEubWZ0MBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgAB BQAwBgQCAAIFADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUA A4IBAQCY8/zKGDZtC9jj/QU99DldbME+tz/fEQkzJx9trz+v5TVrq7QWHYmm1ayG h9LeRvFgCWbia92BmzyJoDr6AxArkG0N4Yf9yy18+9qm5U9Qh/2o+qHN3dabJxd2 iYd+yvXFZRzPxF8n6+AVortYcdsmNXIEaoMjjOXdPvFo+8ds3pXENeCH03FfQvq5 OaPjdtLQsTNjpasYeRE7rZSnKhelQAiyvmoxDV/t6fdzpqHQzzqoMO4rVZu5qkEX D+1ltTvsg5imqHTGlPor997Fs7wAG8EnGGyNby8E3meHQ7eakbTJr8KCXAR1QQnQ XNRLN2fzyl22c00MZyJx6Q/Unm7l -----END CERTIFICATE-----Generated at Sat Aug 15 21:13:24 2026 by rpki-client