$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/260b61-a348-4d47-92f6-1e0e8b909e34/1/nlUyAHdpaUSxYTwujJxgah4G63k.mft File: nlUyAHdpaUSxYTwujJxgah4G63k.mft (raw, json) Hash identifier: xcryCBqO0Bs/+xS4sXa7HATB68PT2xskYDywrb7+VYI= Subject key identifier: 84:B9:79:A9:E3:22:51:03:3D:64:4C:9E:46:8D:C0:6C:AE:8A:4C:C7 Authority key identifier: 9E:55:32:00:77:69:69:44:B1:61:3C:2E:8C:9C:60:6A:1E:06:EB:79 Certificate issuer: /CN=9e55320077696944b1613c2e8c9c606a1e06eb79 Certificate serial: 019D24DED74DEAE893B5BAE1D587884300F7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nlUyAHdpaUSxYTwujJxgah4G63k.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/260b61-a348-4d47-92f6-1e0e8b909e34/1/nlUyAHdpaUSxYTwujJxgah4G63k.mft Manifest number: 18A5 Signing time: Wed 25 Mar 2026 12:01:17 +0000 Manifest this update: Wed 25 Mar 2026 12:01:17 +0000 Manifest next update: Thu 26 Mar 2026 12:01:17 +0000 Files and hashes: 1: 8Eblc7pa_4U4okyHLfqfcyfnWz0.roa (hash: yDyQhyWU2Yy6CbJb1KU7PdxVdmn9PLwPpcooL0C53mY=) 2: AyLKfRccIqVZSZfeJQ1-KG_YPTU.asa (hash: utC08LUwBVA4cVQBYh5JTq1FqYPeFvwHosHL7fDW+sI=) 3: HvJf-bfTg2tiYUvSB0Kj9WjrWi0.roa (hash: Zj79TOXiKACE8B8W/OUq9I83R0d9i1y3XLh2/Gqubpw=) 4: W-sALm5q0yq3QnzfCn9zqwJqvaA.roa (hash: xnIdiawY8eAQvPvkfIlMj6UoPw+J3dJ14IvwIdndhxo=) 5: WDscPdpfG-kb__QIc1556x7o_PY.roa (hash: l96y3WYtqpU/N9iNr6T/BhsvK6KFKMEJ/k50G6U6KZ4=) 6: dDBO-S6Wp6dejnuaBq43TxSUg-A.roa (hash: 4J4YToYV6H1+Y7Dnf4EOV1eYe0uHDGZBia2zslZYn1Y=) 7: f9p5fANR3rgdNF9ibKB-GDcgYp0.asa (hash: qcx5yEHomaJVsdDB+zzIUqbgqwQXu1Ph9bsEC6CL9SQ=) 8: nlUyAHdpaUSxYTwujJxgah4G63k.crl (hash: rbjaeBEWBpqk69FZ70hvUhqy/vD4DKAJQXKYM49WtQo=) 9: ouM5YtdgzmK88LVBLR4anX4lhhA.roa (hash: 8cSgKHpeL4CzJp24fOsiDeOOZHqLgpt9SIcrnZhqRTM=) 10: pG6KdtKifWBBYo7DL8JxMRs-nM0.roa (hash: gKlmdKh10IDFHdiA03gsTAC30YiWDq57ljKUq/ouYK0=) 11: qvhCmUDzNKL8cJBghrHddfWvkhk.roa (hash: UnviboD1YkVxbTanetQc6UpYBMCuKxxYl0kVwOj2pxE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/260b61-a348-4d47-92f6-1e0e8b909e34/1/nlUyAHdpaUSxYTwujJxgah4G63k.crl rsync://rpki.ripe.net/repository/DEFAULT/18/260b61-a348-4d47-92f6-1e0e8b909e34/1/nlUyAHdpaUSxYTwujJxgah4G63k.mft rsync://rpki.ripe.net/repository/DEFAULT/nlUyAHdpaUSxYTwujJxgah4G63k.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 26 Mar 2026 12:01:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9d:24:de:d7:4d:ea:e8:93:b5:ba:e1:d5:87:88:43:00:f7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9e55320077696944b1613c2e8c9c606a1e06eb79 Validity Not Before: Mar 25 12:01:17 2026 GMT Not After : Mar 26 12:01:17 2026 GMT Subject: CN=84b979a9e32251033d644c9e468dc06cae8a4cc7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:be:22:7e:fd:bc:7c:bc:a1:98:2b:20:b9:73: 21:3e:ee:e3:9f:3c:73:dc:58:51:f5:78:3b:67:42: 07:ff:ab:4c:35:05:45:e7:bf:a6:a6:7a:8c:d4:31: d8:45:12:b8:b4:0a:bf:70:5c:02:81:c8:a2:80:62: 48:2b:80:9a:37:8a:25:b0:2c:0e:2c:9a:78:d1:81: c0:2d:44:4a:b3:be:cf:0e:a8:c3:16:80:67:6c:2f: b6:05:c3:25:95:7f:c2:c7:e6:c0:db:54:25:a8:e4: d4:0d:99:8a:79:61:98:4f:c8:56:5b:b8:49:fc:ad: fc:ee:01:3f:7e:50:8c:12:36:59:ba:b3:67:59:c5: 5f:d2:0a:60:90:fd:46:ac:30:50:9c:a1:2c:fd:55: ab:41:72:b3:76:fb:fe:b1:f8:85:21:5d:77:e8:57: e2:02:68:2b:c8:d2:64:a2:60:e3:d0:77:22:ac:4e: 05:2a:f6:f9:ad:e9:32:58:53:77:2b:9e:44:c9:1d: f5:e2:55:d4:6a:9a:54:67:02:5e:dc:3a:67:d6:c5: be:15:39:cf:7e:1f:14:68:23:83:6e:44:a2:4d:01: 54:b5:df:92:58:09:91:fc:55:60:48:eb:cd:28:0f: 15:bb:ea:4e:64:10:fa:8c:6f:45:cf:d4:ca:06:52: 65:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:B9:79:A9:E3:22:51:03:3D:64:4C:9E:46:8D:C0:6C:AE:8A:4C:C7 X509v3 Authority Key Identifier: keyid:9E:55:32:00:77:69:69:44:B1:61:3C:2E:8C:9C:60:6A:1E:06:EB:79 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nlUyAHdpaUSxYTwujJxgah4G63k.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/260b61-a348-4d47-92f6-1e0e8b909e34/1/nlUyAHdpaUSxYTwujJxgah4G63k.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/18/260b61-a348-4d47-92f6-1e0e8b909e34/1/nlUyAHdpaUSxYTwujJxgah4G63k.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 56:8a:2d:3e:76:02:bc:1a:51:32:69:87:15:12:04:32:70:61: 86:36:6a:f9:56:fe:07:77:77:fa:41:a0:c6:27:b6:19:8e:cb: d1:a0:6e:c6:4c:5c:27:d2:ba:9d:24:82:80:ee:14:97:89:d7: 43:ce:c6:e6:a3:2b:bc:8c:93:b6:97:bf:e0:04:e2:79:68:a2: cd:65:fb:4d:a0:28:44:9b:a9:e6:59:c6:d8:0e:c7:4c:ea:ac: 2e:5e:df:91:0f:a6:64:a3:17:e2:e0:3a:47:d8:9f:66:49:96: 2a:ff:c8:01:77:2b:08:d3:bf:cf:50:3c:12:50:af:59:a7:15: 72:e5:15:0f:a8:4c:82:8a:20:84:1e:fa:33:be:02:fe:7b:0b: cd:36:c7:cf:90:ed:87:7a:55:11:fb:01:38:44:c6:4e:e4:41: bd:f6:c4:05:1b:e2:27:79:a1:18:48:54:8c:8d:54:8b:a5:af: 89:7a:ee:a4:79:7b:e6:98:5e:50:b1:b7:ab:a8:e1:9b:b2:c9: ce:e5:af:f6:39:0b:d8:0e:b9:7b:bf:43:d1:5a:db:de:be:5d: e0:8b:48:a4:66:43:68:bd:c4:08:58:ea:11:89:a3:f0:f3:bc: bf:1a:83:9f:4e:e2:ca:cd:1c:f8:fd:f5:bb:92:26:c2:27:b1: c5:ef:94:6f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ0k3tdN6uiTtbrh1YeIQwD3MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDllNTUzMjAwNzc2OTY5NDRiMTYxM2MyZThjOWM2MDZhMWUw NmViNzkwHhcNMjYwMzI1MTIwMTE3WhcNMjYwMzI2MTIwMTE3WjAzMTEwLwYDVQQD Eyg4NGI5NzlhOWUzMjI1MTAzM2Q2NDRjOWU0NjhkYzA2Y2FlOGE0Y2M3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAur4ifv28fLyhmCsguXMhPu7jnzxz 3FhR9Xg7Z0IH/6tMNQVF57+mpnqM1DHYRRK4tAq/cFwCgciigGJIK4CaN4olsCwO LJp40YHALURKs77PDqjDFoBnbC+2BcMllX/Cx+bA21QlqOTUDZmKeWGYT8hWW7hJ /K387gE/flCMEjZZurNnWcVf0gpgkP1GrDBQnKEs/VWrQXKzdvv+sfiFIV136Ffi AmgryNJkomDj0HcirE4FKvb5rekyWFN3K55EyR314lXUappUZwJe3Dpn1sW+FTnP fh8UaCODbkSiTQFUtd+SWAmR/FVgSOvNKA8Vu+pOZBD6jG9Fz9TKBlJloQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIS5eanjIlEDPWRMnkaNwGyuikzHMB8GA1UdIwQY MBaAFJ5VMgB3aWlEsWE8LoycYGoeBut5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbmxVeUFIZHBhVVN4WVR3dWpKeGdhaDRHNjNrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOC8yNjBiNjEtYTM0OC00ZDQ3LTkyZjYt MWUwZThiOTA5ZTM0LzEvbmxVeUFIZHBhVVN4WVR3dWpKeGdhaDRHNjNrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xOC8yNjBiNjEtYTM0OC00ZDQ3LTkyZjYtMWUwZThiOTA5ZTM0 LzEvbmxVeUFIZHBhVVN4WVR3dWpKeGdhaDRHNjNrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVootPnYC vBpRMmmHFRIEMnBhhjZq+Vb+B3d3+kGgxie2GY7L0aBuxkxcJ9K6nSSCgO4Ul4nX Q87G5qMrvIyTtpe/4ATieWiizWX7TaAoRJup5lnG2A7HTOqsLl7fkQ+mZKMX4uA6 R9ifZkmWKv/IAXcrCNO/z1A8ElCvWacVcuUVD6hMgooghB76M74C/nsLzTbHz5Dt h3pVEfsBOETGTuRBvfbEBRviJ3mhGEhUjI1Ui6WviXrupHl75pheULG3q6jhm7LJ zuWv9jkL2A65e79D0Vrb3r5d4ItIpGZDaL3ECFjqEYmj8PO8vxqDn07iys0c+P31 u5Imwiexxe+Ubw== -----END CERTIFICATE-----Generated at Wed Mar 25 21:26:05 2026 by rpki-client