$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/18/260b61-a348-4d47-92f6-1e0e8b909e34/1/nlUyAHdpaUSxYTwujJxgah4G63k.mft File: nlUyAHdpaUSxYTwujJxgah4G63k.mft (raw, json) Hash identifier: 9kbJ2YmrD6nFl4kVVral/px01ELMzoAlBLfw0KIfsZw= Subject key identifier: DD:9B:91:42:B5:43:37:6D:B5:32:02:24:C2:BF:A1:72:AE:BB:8B:DB Authority key identifier: 9E:55:32:00:77:69:69:44:B1:61:3C:2E:8C:9C:60:6A:1E:06:EB:79 Certificate issuer: /CN=9e55320077696944b1613c2e8c9c606a1e06eb79 Certificate serial: 01A0CA478414D5B3E0EB9C7A217C21133E41 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nlUyAHdpaUSxYTwujJxgah4G63k.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/260b61-a348-4d47-92f6-1e0e8b909e34/1/nlUyAHdpaUSxYTwujJxgah4G63k.mft Manifest number: 1A89 Signing time: Tue 22 Sep 2026 18:01:19 +0000 Manifest this update: Tue 22 Sep 2026 18:01:19 +0000 Manifest next update: Wed 23 Sep 2026 18:01:19 +0000 Files and hashes: 1: 8Eblc7pa_4U4okyHLfqfcyfnWz0.roa (hash: yDyQhyWU2Yy6CbJb1KU7PdxVdmn9PLwPpcooL0C53mY=) 2: AyLKfRccIqVZSZfeJQ1-KG_YPTU.asa (hash: utC08LUwBVA4cVQBYh5JTq1FqYPeFvwHosHL7fDW+sI=) 3: HvJf-bfTg2tiYUvSB0Kj9WjrWi0.roa (hash: Zj79TOXiKACE8B8W/OUq9I83R0d9i1y3XLh2/Gqubpw=) 4: W-sALm5q0yq3QnzfCn9zqwJqvaA.roa (hash: xnIdiawY8eAQvPvkfIlMj6UoPw+J3dJ14IvwIdndhxo=) 5: WDscPdpfG-kb__QIc1556x7o_PY.roa (hash: l96y3WYtqpU/N9iNr6T/BhsvK6KFKMEJ/k50G6U6KZ4=) 6: dDBO-S6Wp6dejnuaBq43TxSUg-A.roa (hash: 4J4YToYV6H1+Y7Dnf4EOV1eYe0uHDGZBia2zslZYn1Y=) 7: emE3k5mpGo837IHnxMhWq1ufD6w.asa (hash: BWnROOAQXj4iBe5c9BYzHZA2Z+H659fm2Nrz/OItGO0=) 8: f9p5fANR3rgdNF9ibKB-GDcgYp0.asa (hash: qcx5yEHomaJVsdDB+zzIUqbgqwQXu1Ph9bsEC6CL9SQ=) 9: nlUyAHdpaUSxYTwujJxgah4G63k.crl (hash: 9ceyBB/rLHcFJ/umSdTjX4i0axy11qS+gtZ42JXnZkQ=) 10: ouM5YtdgzmK88LVBLR4anX4lhhA.roa (hash: 8cSgKHpeL4CzJp24fOsiDeOOZHqLgpt9SIcrnZhqRTM=) 11: pG6KdtKifWBBYo7DL8JxMRs-nM0.roa (hash: gKlmdKh10IDFHdiA03gsTAC30YiWDq57ljKUq/ouYK0=) 12: qvhCmUDzNKL8cJBghrHddfWvkhk.roa (hash: UnviboD1YkVxbTanetQc6UpYBMCuKxxYl0kVwOj2pxE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/260b61-a348-4d47-92f6-1e0e8b909e34/1/nlUyAHdpaUSxYTwujJxgah4G63k.crl rsync://rpki.ripe.net/repository/DEFAULT/18/260b61-a348-4d47-92f6-1e0e8b909e34/1/nlUyAHdpaUSxYTwujJxgah4G63k.mft rsync://rpki.ripe.net/repository/DEFAULT/nlUyAHdpaUSxYTwujJxgah4G63k.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 23 Sep 2026 14:00:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a0:ca:47:84:14:d5:b3:e0:eb:9c:7a:21:7c:21:13:3e:41 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9e55320077696944b1613c2e8c9c606a1e06eb79 Validity Not Before: Sep 22 18:01:19 2026 GMT Not After : Sep 23 18:01:19 2026 GMT Subject: CN=dd9b9142b543376db5320224c2bfa172aebb8bdb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:70:a0:4c:8d:04:1b:14:29:31:89:4d:96:65: d1:60:4b:38:59:be:ba:e6:a5:3f:67:e8:a7:4f:f0: 3c:69:69:57:a4:ff:89:78:61:26:83:78:3f:4d:4d: df:61:11:ff:3f:7f:93:1e:70:3b:1c:6e:f7:6f:85: 10:a6:ca:6e:50:75:40:33:a3:75:46:1e:18:cd:5b: ab:3f:27:a9:4b:5b:bf:94:98:88:e7:4b:5b:ac:0a: ac:85:b5:f0:7b:a6:48:19:4a:91:f6:4b:e5:f8:3a: fb:f0:be:63:a4:47:d2:ca:d4:51:20:56:23:ce:29: 3d:af:52:11:0c:ad:16:4d:27:06:2b:36:6f:1f:9f: 3b:fc:36:30:93:d7:74:18:27:71:17:94:d0:25:dc: 68:2f:71:08:56:0a:d7:bb:2a:d0:fc:ed:36:bc:3d: df:08:43:bc:f6:63:ff:07:de:01:09:c8:7f:09:7a: 05:da:e0:71:ce:f9:bc:da:87:59:95:20:33:6f:1d: 5b:7e:ef:7f:ba:a1:b3:72:e5:eb:a0:e6:4c:4c:24: 68:59:2b:86:8c:da:e4:94:38:6f:72:c3:84:ef:d5: 8b:27:4f:5c:fe:22:73:b1:7c:59:53:06:95:5e:6e: 45:e5:6a:ec:11:dd:db:3d:01:1a:47:f8:31:56:dd: 48:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:9B:91:42:B5:43:37:6D:B5:32:02:24:C2:BF:A1:72:AE:BB:8B:DB X509v3 Authority Key Identifier: keyid:9E:55:32:00:77:69:69:44:B1:61:3C:2E:8C:9C:60:6A:1E:06:EB:79 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nlUyAHdpaUSxYTwujJxgah4G63k.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/260b61-a348-4d47-92f6-1e0e8b909e34/1/nlUyAHdpaUSxYTwujJxgah4G63k.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/18/260b61-a348-4d47-92f6-1e0e8b909e34/1/nlUyAHdpaUSxYTwujJxgah4G63k.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 87:0c:e9:dd:6b:ea:75:e2:3b:99:c6:2f:38:a6:a3:25:35:28: e4:a7:e9:65:8f:d2:d6:67:cd:ad:4f:fd:3e:78:e5:08:fd:bc: ad:46:19:0e:f2:e1:b2:29:44:43:a8:d1:e3:13:95:f5:50:30: 88:62:21:6e:2a:79:bd:08:11:ad:e4:32:ae:61:1b:3c:b6:a2: 0b:c8:b6:b9:35:2e:78:8d:2a:47:0e:45:1b:30:c0:6c:38:6d: 40:61:26:c3:ba:f1:17:05:01:50:c0:6b:e4:3a:bb:70:c9:4c: 61:cd:c3:e6:01:e8:4d:83:05:34:f4:1f:4f:50:ee:7e:cf:3a: 7b:87:e1:bd:4a:24:1d:33:33:ac:89:c4:ad:62:f4:68:9e:01: cb:57:60:d2:3a:83:47:fe:11:7d:e0:75:37:1c:63:3d:10:0f: 82:de:20:78:b0:64:0f:82:43:9a:3e:92:4d:eb:ab:89:ed:b1: 34:80:c5:34:ad:49:74:17:ce:d8:f6:e2:dc:95:3e:88:f2:93: 4e:40:e5:48:68:8f:d7:14:94:8a:25:ce:f7:d0:07:af:d5:45: 87:34:61:15:e3:f9:0e:95:4b:dd:71:90:2e:3e:10:31:eb:1c: b9:2b:64:b1:0f:48:e4:8e:de:7f:75:40:4b:a3:e0:1b:dd:33: 96:06:53:03 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaDKR4QU1bPg65x6IXwhEz5BMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDllNTUzMjAwNzc2OTY5NDRiMTYxM2MyZThjOWM2MDZhMWUw NmViNzkwHhcNMjYwOTIyMTgwMTE5WhcNMjYwOTIzMTgwMTE5WjAzMTEwLwYDVQQD EyhkZDliOTE0MmI1NDMzNzZkYjUzMjAyMjRjMmJmYTE3MmFlYmI4YmRiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApHCgTI0EGxQpMYlNlmXRYEs4Wb66 5qU/Z+inT/A8aWlXpP+JeGEmg3g/TU3fYRH/P3+THnA7HG73b4UQpspuUHVAM6N1 Rh4YzVurPyepS1u/lJiI50tbrAqshbXwe6ZIGUqR9kvl+Dr78L5jpEfSytRRIFYj zik9r1IRDK0WTScGKzZvH587/DYwk9d0GCdxF5TQJdxoL3EIVgrXuyrQ/O02vD3f CEO89mP/B94BCch/CXoF2uBxzvm82odZlSAzbx1bfu9/uqGzcuXroOZMTCRoWSuG jNrklDhvcsOE79WLJ09c/iJzsXxZUwaVXm5F5WrsEd3bPQEaR/gxVt1IFwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFN2bkUK1QzdttTICJMK/oXKuu4vbMB8GA1UdIwQY MBaAFJ5VMgB3aWlEsWE8LoycYGoeBut5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbmxVeUFIZHBhVVN4WVR3dWpKeGdhaDRHNjNrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOC8yNjBiNjEtYTM0OC00ZDQ3LTkyZjYt MWUwZThiOTA5ZTM0LzEvbmxVeUFIZHBhVVN4WVR3dWpKeGdhaDRHNjNrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xOC8yNjBiNjEtYTM0OC00ZDQ3LTkyZjYtMWUwZThiOTA5ZTM0 LzEvbmxVeUFIZHBhVVN4WVR3dWpKeGdhaDRHNjNrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhwzp3Wvq deI7mcYvOKajJTUo5KfpZY/S1mfNrU/9PnjlCP28rUYZDvLhsilEQ6jR4xOV9VAw iGIhbip5vQgRreQyrmEbPLaiC8i2uTUueI0qRw5FGzDAbDhtQGEmw7rxFwUBUMBr 5Dq7cMlMYc3D5gHoTYMFNPQfT1Dufs86e4fhvUokHTMzrInErWL0aJ4By1dg0jqD R/4RfeB1NxxjPRAPgt4geLBkD4JDmj6STeurie2xNIDFNK1JdBfO2Pbi3JU+iPKT TkDlSGiP1xSUiiXO99AHr9VFhzRhFeP5DpVL3XGQLj4QMescuStksQ9I5I7ef3VA S6PgG90zlgZTAw== -----END CERTIFICATE-----Generated at Tue Sep 22 20:45:58 2026 by rpki-client