$ rpki-client -vvvf rsync.krill.nlnetlabs.nl/repo/nlnetlabs/1/DC780D9935DABC701A4C4832B16C11D7743C399A.mft File: DC780D9935DABC701A4C4832B16C11D7743C399A.mft (raw, json) Hash identifier: c/MELv63CsvversvjaNf7l3OTe5/YM6Ju1cmTpNp0Qc= Subject key identifier: 81:08:88:80:69:2E:C8:75:16:DD:D4:CB:39:19:B0:75:76:11:81:B8 Authority key identifier: DC:78:0D:99:35:DA:BC:70:1A:4C:48:32:B1:6C:11:D7:74:3C:39:9A Certificate issuer: /CN=dc780d9935dabc701a4c4832b16c11d7743c399a Certificate serial: 7677E3286C05D8860D0B0A8FBF8F76FE80A0A3CA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3HgNmTXavHAaTEgysWwR13Q8OZo.cer Subject info access: rsync://rsync.krill.nlnetlabs.nl/repo/nlnetlabs/1/DC780D9935DABC701A4C4832B16C11D7743C399A.mft Manifest number: 0232 Signing time: Tue 22 Sep 2026 21:45:59 +0000 Manifest this update: Tue 22 Sep 2026 21:40:59 +0000 Manifest next update: Wed 23 Sep 2026 22:04:59 +0000 Files and hashes: 1: DC780D9935DABC701A4C4832B16C11D7743C399A.crl (hash: Br9QYy2Lxo5ie0p2Fb5ATVe77JyTtZpd0Ph/pUnaVME=) 2: 326130343a623930343a373230303a3a2f34302d3430203d3e20323131333231.roa (hash: refEY6cMSdDY7cBVUX5w6R5vf51PxokJ+N8DMMimo3o=) 3: 326130343a623930363a3a2f34382d3438203d3e2030.roa (hash: eiOsAFzUoO5n+xOw6ZqDfb1W9mjnMVvG3lh8Uszxqbc=) 4: 3138352e34392e3134332e302f32342d3234203d3e203630313331.roa (hash: 3y7Jbg3sm1uifLkJV88tgfg6D6rTEYYvAHPNscUUhHA=) 5: 326130343a623930373a3a2f34382d3438203d3e2030.roa (hash: pEkraM4NhbgBsFbDwa7w6tJcsCMwH3uOz0vykIUzTk8=) 6: 326130343a623930303a3a2f33302d3332203d3e2038353837.roa (hash: mcRkbX+EcmuVG5kbogYs1kTfFjmT6GSDRiWlit7LIEo=) 7: 326130343a623930303a3a2f33302d3330203d3e2038353837.roa (hash: YVqDFSJM9BpzA7j/lmc/Km9kXBCWwBuBJnXVpd3c0oA=) 8: 3138352e34392e3134322e302f32332d3233203d3e20323131333231.roa (hash: G71RBaKhsjP596XjbfAcbZmTzgSOwVARGZ/mPeB9am8=) 9: 326130343a623930343a3a2f34382d3438203d3e20323131333231.roa (hash: uEPfzD+wbnhTwsVWW/UrDfMoUMKBuHi0vPl0IGNr7n4=) 10: C8623AA6C30FA8E058243708F5672D7960E52389.cer (hash: xh+MW2FduGLhuo30+/bFrTnjBprE+rX9TK+QGtrFq9E=) 11: 3138352e34392e3134322e302f32342d3234203d3e2030.roa (hash: +h5nxp3r86DxkM+mEV1xj5BP7LH8Lp8uZ6CT1Hi1E54=) 12: 3138352e34392e3134332e302f32342d3234203d3e20323131333231.roa (hash: 0B5YOvITIZWZRxiAsBfwVFBJO8A9+rknJ70VrZXbmhM=) 13: 3138352e34392e3134302e302f32332d3233203d3e2038353837.roa (hash: U8+OIXzaopDuaYf7hsd7liluEK65HTMfxtzOs2eUutU=) 14: 326130343a623930353a3a2f34382d3438203d3e203136353039.roa (hash: d+iw2diCkJRaNGhzIf4J/JKw8L1IDPPlPbWg6NjYiQ8=) 15: 326130343a623930373a3a2f34372d3437203d3e20323131333231.roa (hash: q5XBQbeSajkFemFHOP7sJXFLQua3ROC9i4L+KFjqA2Y=) 16: 326130343a623930323a3a2f34382d3438203d3e20323131333231.roa (hash: DvRjC5YVaO6hAiGHU5zPxy3o6I0+1biPcChDZYr62qk=) Validation: OK Signature path: rsync://rsync.krill.nlnetlabs.nl/repo/nlnetlabs/1/DC780D9935DABC701A4C4832B16C11D7743C399A.crl rsync://rsync.krill.nlnetlabs.nl/repo/nlnetlabs/1/DC780D9935DABC701A4C4832B16C11D7743C399A.mft rsync://rpki.ripe.net/repository/DEFAULT/3HgNmTXavHAaTEgysWwR13Q8OZo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 23 Sep 2026 22:04:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 76:77:e3:28:6c:05:d8:86:0d:0b:0a:8f:bf:8f:76:fe:80:a0:a3:ca Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dc780d9935dabc701a4c4832b16c11d7743c399a Validity Not Before: Sep 22 21:40:59 2026 GMT Not After : Sep 23 22:04:59 2026 GMT Subject: CN=81088880692EC87516DDD4CB3919B075761181B8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:df:ba:ac:60:ac:7a:aa:75:06:67:78:8f:a6: a9:c8:ff:1c:af:64:44:6d:bf:f8:bd:66:dd:55:b7: 29:2b:60:c6:24:36:c0:14:64:0d:80:50:c4:98:11: dd:31:9c:70:76:2a:e0:91:6d:b4:cd:71:cc:ce:ab: e5:09:48:ef:f9:e0:ad:b1:71:4d:08:ca:7b:b4:95: 28:5a:28:3c:78:8f:af:2e:dc:26:a1:72:e4:e2:e8: 80:e7:01:b4:74:4d:21:34:1b:8a:37:75:b6:88:09: 1b:c2:4b:bf:60:53:a3:3a:61:3f:50:79:24:a9:12: 3b:3b:d3:bf:69:ab:aa:01:b9:41:75:5f:d5:ac:32: f8:8e:cb:8f:34:12:e5:a1:c3:65:46:6f:b9:f9:00: 74:0a:0e:bb:6c:a8:99:2d:c7:a4:a5:be:61:ee:d2: 99:7a:98:96:2b:e5:9c:44:04:ff:14:21:3d:2e:99: 45:61:28:0f:06:bb:67:62:07:44:11:3c:ad:4b:19: 6d:5e:55:ea:97:fc:c2:c9:cf:13:ac:be:fb:05:0e: 6c:c9:be:78:66:04:b1:9a:fb:13:9f:34:8d:fa:c2: 0a:d7:06:a7:ca:f1:66:12:4c:f7:89:cc:26:09:b6: 65:d3:2b:17:17:fd:ea:bb:fd:49:93:ae:37:6c:4d: df:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:08:88:80:69:2E:C8:75:16:DD:D4:CB:39:19:B0:75:76:11:81:B8 X509v3 Authority Key Identifier: keyid:DC:78:0D:99:35:DA:BC:70:1A:4C:48:32:B1:6C:11:D7:74:3C:39:9A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.krill.nlnetlabs.nl/repo/nlnetlabs/1/DC780D9935DABC701A4C4832B16C11D7743C399A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3HgNmTXavHAaTEgysWwR13Q8OZo.cer Subject Information Access: Signed Object - URI:rsync://rsync.krill.nlnetlabs.nl/repo/nlnetlabs/1/DC780D9935DABC701A4C4832B16C11D7743C399A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0e:01:61:9b:bb:e9:01:f4:7d:bc:ed:30:5b:ba:ab:2b:d7:75: 6f:24:a7:52:81:ac:f7:51:48:2b:36:a3:63:60:56:f5:9d:e5: e1:4b:c5:fa:d4:5c:93:32:74:54:4d:9f:ce:20:07:7f:22:d3: 38:ab:c7:a7:fd:d3:62:64:af:62:6e:bc:7b:a1:00:af:b1:10: 83:b0:d9:0a:2f:52:fc:68:a0:0f:ec:52:1a:2d:e0:3f:71:1f: 20:35:d0:08:4e:3c:7e:ed:cc:05:f7:7a:78:35:c8:ab:65:2a: fa:f2:51:d0:d4:b4:cb:3b:9f:dd:cc:5f:b2:95:5f:60:f8:b9: 52:54:1d:fc:c0:84:98:c9:40:7c:2d:37:88:4f:78:9a:f9:e9: 80:0d:5d:02:ea:80:bd:e9:15:65:4a:cb:06:d8:4e:7b:6e:c2: e3:5d:f3:17:cd:f3:77:e9:73:aa:3b:ba:2b:48:7d:15:01:2d: d7:3b:d6:aa:4c:4c:cf:64:a0:c8:cd:d0:a8:0d:a3:49:0f:f1: bb:d7:e6:61:75:6d:0d:55:9f:93:f0:2a:98:0c:c3:1f:aa:97: 88:13:0f:2a:1e:8a:16:d9:a5:3a:52:13:ce:02:48:7e:6b:ac: a7:30:53:4d:72:8c:49:0c:b4:6d:b5:3e:31:3f:31:0d:31:49: ce:c7:8b:74 -----BEGIN CERTIFICATE----- MIIE8TCCA9mgAwIBAgIUdnfjKGwF2IYNCwqPv492/oCgo8owDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoZGM3ODBkOTkzNWRhYmM3MDFhNGM0ODMyYjE2YzExZDc3 NDNjMzk5YTAeFw0yNjA5MjIyMTQwNTlaFw0yNjA5MjMyMjA0NTlaMDMxMTAvBgNV BAMTKDgxMDg4ODgwNjkyRUM4NzUxNkRERDRDQjM5MTlCMDc1NzYxMTgxQjgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCn37qsYKx6qnUGZ3iPpqnI/xyv ZERtv/i9Zt1VtykrYMYkNsAUZA2AUMSYEd0xnHB2KuCRbbTNcczOq+UJSO/54K2x cU0Iynu0lShaKDx4j68u3CahcuTi6IDnAbR0TSE0G4o3dbaICRvCS79gU6M6YT9Q eSSpEjs7079pq6oBuUF1X9WsMviOy480EuWhw2VGb7n5AHQKDrtsqJktx6SlvmHu 0pl6mJYr5ZxEBP8UIT0umUVhKA8Gu2diB0QRPK1LGW1eVeqX/MLJzxOsvvsFDmzJ vnhmBLGa+xOfNI36wgrXBqfK8WYSTPeJzCYJtmXTKxcX/eq7/UmTrjdsTd/fAgMB AAGjggH7MIIB9zAdBgNVHQ4EFgQUgQiIgGkuyHUW3dTLORmwdXYRgbgwHwYDVR0j BBgwFoAU3HgNmTXavHAaTEgysWwR13Q8OZowDgYDVR0PAQH/BAQDAgeAMG8GA1Ud HwRoMGYwZKBioGCGXnJzeW5jOi8vcnN5bmMua3JpbGwubmxuZXRsYWJzLm5sL3Jl cG8vbmxuZXRsYWJzLzEvREM3ODBEOTkzNURBQkM3MDFBNEM0ODMyQjE2QzExRDc3 NDNDMzk5QS5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzov L3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzNIZ05tVFhhdkhBYVRF Z3lzV3dSMTNROE9aby5jZXIwegYIKwYBBQUHAQsEbjBsMGoGCCsGAQUFBzALhl5y c3luYzovL3JzeW5jLmtyaWxsLm5sbmV0bGFicy5ubC9yZXBvL25sbmV0bGFicy8x L0RDNzgwRDk5MzVEQUJDNzAxQTRDNDgzMkIxNkMxMUQ3NzQzQzM5OUEubWZ0MBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgAB BQAwBgQCAAIFADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUA A4IBAQAOAWGbu+kB9H287TBbuqsr13VvJKdSgaz3UUgrNqNjYFb1neXhS8X61FyT MnRUTZ/OIAd/ItM4q8en/dNiZK9ibrx7oQCvsRCDsNkKL1L8aKAP7FIaLeA/cR8g NdAITjx+7cwF93p4NcirZSr68lHQ1LTLO5/dzF+ylV9g+LlSVB38wISYyUB8LTeI T3ia+emADV0C6oC96RVlSssG2E57bsLjXfMXzfN36XOqO7orSH0VAS3XO9aqTEzP ZKDIzdCoDaNJD/G71+ZhdW0NVZ+T8CqYDMMfqpeIEw8qHooW2aU6UhPOAkh+a6yn MFNNcoxJDLRttT4xPzENMUnOx4t0 -----END CERTIFICATE-----Generated at Wed Sep 23 17:12:21 2026 by rpki-client