$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/260b61-a348-4d47-92f6-1e0e8b909e34/1/nlUyAHdpaUSxYTwujJxgah4G63k.mft File: nlUyAHdpaUSxYTwujJxgah4G63k.mft (raw, json) Hash identifier: Ec2n2FpkZpsOThNni7UjxwQc1SSbHE3rrkYDCrb17Hs= Subject key identifier: 8B:C7:24:E6:F1:F2:B5:C7:F5:8B:37:B8:81:41:7F:19:A6:5C:A5:13 Authority key identifier: 9E:55:32:00:77:69:69:44:B1:61:3C:2E:8C:9C:60:6A:1E:06:EB:79 Certificate issuer: /CN=9e55320077696944b1613c2e8c9c606a1e06eb79 Certificate serial: 019E1C102B46A250C79CA356A3186B070C85 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nlUyAHdpaUSxYTwujJxgah4G63k.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/260b61-a348-4d47-92f6-1e0e8b909e34/1/nlUyAHdpaUSxYTwujJxgah4G63k.mft Manifest number: 1925 Signing time: Tue 12 May 2026 12:01:22 +0000 Manifest this update: Tue 12 May 2026 12:01:22 +0000 Manifest next update: Wed 13 May 2026 12:01:22 +0000 Files and hashes: 1: 8Eblc7pa_4U4okyHLfqfcyfnWz0.roa (hash: yDyQhyWU2Yy6CbJb1KU7PdxVdmn9PLwPpcooL0C53mY=) 2: AyLKfRccIqVZSZfeJQ1-KG_YPTU.asa (hash: utC08LUwBVA4cVQBYh5JTq1FqYPeFvwHosHL7fDW+sI=) 3: HvJf-bfTg2tiYUvSB0Kj9WjrWi0.roa (hash: Zj79TOXiKACE8B8W/OUq9I83R0d9i1y3XLh2/Gqubpw=) 4: W-sALm5q0yq3QnzfCn9zqwJqvaA.roa (hash: xnIdiawY8eAQvPvkfIlMj6UoPw+J3dJ14IvwIdndhxo=) 5: WDscPdpfG-kb__QIc1556x7o_PY.roa (hash: l96y3WYtqpU/N9iNr6T/BhsvK6KFKMEJ/k50G6U6KZ4=) 6: dDBO-S6Wp6dejnuaBq43TxSUg-A.roa (hash: 4J4YToYV6H1+Y7Dnf4EOV1eYe0uHDGZBia2zslZYn1Y=) 7: f9p5fANR3rgdNF9ibKB-GDcgYp0.asa (hash: qcx5yEHomaJVsdDB+zzIUqbgqwQXu1Ph9bsEC6CL9SQ=) 8: nlUyAHdpaUSxYTwujJxgah4G63k.crl (hash: j7M1CBX7YJH0USI1aji4gDl6W03lY7hB1uxvQMpJTxA=) 9: ouM5YtdgzmK88LVBLR4anX4lhhA.roa (hash: 8cSgKHpeL4CzJp24fOsiDeOOZHqLgpt9SIcrnZhqRTM=) 10: pG6KdtKifWBBYo7DL8JxMRs-nM0.roa (hash: gKlmdKh10IDFHdiA03gsTAC30YiWDq57ljKUq/ouYK0=) 11: qvhCmUDzNKL8cJBghrHddfWvkhk.roa (hash: UnviboD1YkVxbTanetQc6UpYBMCuKxxYl0kVwOj2pxE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/260b61-a348-4d47-92f6-1e0e8b909e34/1/nlUyAHdpaUSxYTwujJxgah4G63k.crl rsync://rpki.ripe.net/repository/DEFAULT/18/260b61-a348-4d47-92f6-1e0e8b909e34/1/nlUyAHdpaUSxYTwujJxgah4G63k.mft rsync://rpki.ripe.net/repository/DEFAULT/nlUyAHdpaUSxYTwujJxgah4G63k.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 13 May 2026 12:01:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9e:1c:10:2b:46:a2:50:c7:9c:a3:56:a3:18:6b:07:0c:85 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9e55320077696944b1613c2e8c9c606a1e06eb79 Validity Not Before: May 12 12:01:22 2026 GMT Not After : May 13 12:01:22 2026 GMT Subject: CN=8bc724e6f1f2b5c7f58b37b881417f19a65ca513 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:a9:b1:00:f3:de:d5:52:50:83:da:1b:26:6c: 7f:a0:1a:f9:f2:0a:5f:70:48:7c:79:35:a1:df:3e: c7:26:d5:a8:22:de:1d:7b:e3:06:38:79:6b:68:76: ea:2e:68:b6:4b:b4:af:e1:d5:84:75:6f:6c:06:1f: a0:b8:d0:86:95:a6:20:eb:94:86:e9:51:b6:1e:68: 7f:22:38:dd:f4:01:38:99:68:88:54:75:03:30:89: 28:e4:10:f0:07:1f:94:5c:f4:d4:cc:14:d8:d7:a0: b5:c9:db:4f:b9:3e:39:0a:1d:85:73:aa:67:b9:0e: 04:b6:d3:72:ae:41:90:10:69:ee:67:8b:e0:2d:81: 0b:14:d9:3c:ff:e7:75:12:23:3d:2a:bc:d7:83:20: 6d:57:d0:b4:ff:96:b4:ea:4b:31:65:15:0c:57:fe: d3:a4:31:2a:52:69:6e:8b:ff:5b:6b:d1:a9:4f:d7: 6f:ff:40:24:f4:be:32:c0:3a:89:23:11:fb:d5:fe: f2:78:0f:17:a7:2a:0d:83:07:4e:e3:9b:51:8e:70: 9e:68:d8:f6:06:92:94:a0:a5:2c:63:1f:a9:02:8a: 46:7b:e7:63:e3:ce:e9:b1:40:38:48:16:a1:50:53: e0:96:a3:73:bd:6b:51:ca:d3:57:32:fe:96:dd:46: 16:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:C7:24:E6:F1:F2:B5:C7:F5:8B:37:B8:81:41:7F:19:A6:5C:A5:13 X509v3 Authority Key Identifier: keyid:9E:55:32:00:77:69:69:44:B1:61:3C:2E:8C:9C:60:6A:1E:06:EB:79 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nlUyAHdpaUSxYTwujJxgah4G63k.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/260b61-a348-4d47-92f6-1e0e8b909e34/1/nlUyAHdpaUSxYTwujJxgah4G63k.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/18/260b61-a348-4d47-92f6-1e0e8b909e34/1/nlUyAHdpaUSxYTwujJxgah4G63k.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c4:b4:f9:a8:91:a7:8c:e1:2b:03:d4:ba:c6:58:c7:02:4b:37: 65:1c:9b:39:bc:54:a2:fe:48:0d:22:e6:27:5a:1a:3e:04:03: 37:50:77:3e:e0:ce:4f:a7:6a:97:35:4c:fe:6b:3c:6f:9b:0b: 6d:14:b0:45:eb:58:9e:f8:47:3c:e8:b9:76:3f:b0:37:a3:1c: f5:20:f1:47:ef:59:12:b8:78:a5:f5:a7:96:42:84:02:8d:f4: 1d:09:44:c9:47:0f:75:fc:d3:03:65:fd:b9:ad:fd:b9:7b:de: ad:44:a5:e0:64:55:b1:a4:e1:a3:0d:51:28:22:5e:70:c4:04: a1:2f:b5:d8:0f:66:e8:49:6e:ee:e0:70:93:42:89:40:b4:51: f6:64:85:7b:1d:75:7e:4e:fa:cf:d5:26:36:b7:93:fa:e1:e0: 7d:55:2a:66:5a:cd:dd:a9:00:7e:1e:6e:28:f7:60:88:8b:ea: f3:f6:7a:44:4f:8f:66:55:9b:9c:12:cd:b0:36:f8:29:42:e1: 03:65:d9:80:ee:b0:2c:17:79:e1:47:fb:6a:98:63:5b:a1:0e: 40:19:2b:60:e2:e5:52:43:aa:c8:54:92:5a:97:b3:a6:88:60: c5:69:6f:95:45:fa:95:72:75:d6:44:61:e2:ed:e6:98:2e:21: 4e:af:cf:72 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ4cECtGolDHnKNWoxhrBwyFMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDllNTUzMjAwNzc2OTY5NDRiMTYxM2MyZThjOWM2MDZhMWUw NmViNzkwHhcNMjYwNTEyMTIwMTIyWhcNMjYwNTEzMTIwMTIyWjAzMTEwLwYDVQQD Eyg4YmM3MjRlNmYxZjJiNWM3ZjU4YjM3Yjg4MTQxN2YxOWE2NWNhNTEzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtqmxAPPe1VJQg9obJmx/oBr58gpf cEh8eTWh3z7HJtWoIt4de+MGOHlraHbqLmi2S7Sv4dWEdW9sBh+guNCGlaYg65SG 6VG2Hmh/Ijjd9AE4mWiIVHUDMIko5BDwBx+UXPTUzBTY16C1ydtPuT45Ch2Fc6pn uQ4EttNyrkGQEGnuZ4vgLYELFNk8/+d1EiM9KrzXgyBtV9C0/5a06ksxZRUMV/7T pDEqUmlui/9ba9GpT9dv/0Ak9L4ywDqJIxH71f7yeA8XpyoNgwdO45tRjnCeaNj2 BpKUoKUsYx+pAopGe+dj487psUA4SBahUFPglqNzvWtRytNXMv6W3UYW+QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIvHJObx8rXH9Ys3uIFBfxmmXKUTMB8GA1UdIwQY MBaAFJ5VMgB3aWlEsWE8LoycYGoeBut5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbmxVeUFIZHBhVVN4WVR3dWpKeGdhaDRHNjNrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOC8yNjBiNjEtYTM0OC00ZDQ3LTkyZjYt MWUwZThiOTA5ZTM0LzEvbmxVeUFIZHBhVVN4WVR3dWpKeGdhaDRHNjNrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xOC8yNjBiNjEtYTM0OC00ZDQ3LTkyZjYtMWUwZThiOTA5ZTM0 LzEvbmxVeUFIZHBhVVN4WVR3dWpKeGdhaDRHNjNrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAxLT5qJGn jOErA9S6xljHAks3ZRybObxUov5IDSLmJ1oaPgQDN1B3PuDOT6dqlzVM/ms8b5sL bRSwRetYnvhHPOi5dj+wN6Mc9SDxR+9ZErh4pfWnlkKEAo30HQlEyUcPdfzTA2X9 ua39uXverUSl4GRVsaThow1RKCJecMQEoS+12A9m6Elu7uBwk0KJQLRR9mSFex11 fk76z9UmNreT+uHgfVUqZlrN3akAfh5uKPdgiIvq8/Z6RE+PZlWbnBLNsDb4KULh A2XZgO6wLBd54Uf7aphjW6EOQBkrYOLlUkOqyFSSWpezpohgxWlvlUX6lXJ11kRh 4u3mmC4hTq/Pcg== -----END CERTIFICATE-----Generated at Tue May 12 21:26:56 2026 by rpki-client