$ rpki-client -vvf rsync.krill.nlnetlabs.nl/repo/nlnetlabs/1/DC780D9935DABC701A4C4832B16C11D7743C399A.mft File: DC780D9935DABC701A4C4832B16C11D7743C399A.mft (raw, json) Hash identifier: DunUU0YVljxEGlkJYd9lE+vUk8DsfN1wrcIDTptR3qA= Subject key identifier: AA:CE:67:CC:05:A6:E4:15:4C:63:68:C9:E5:65:55:B9:0F:9D:88:C7 Authority key identifier: DC:78:0D:99:35:DA:BC:70:1A:4C:48:32:B1:6C:11:D7:74:3C:39:9A Certificate issuer: /CN=dc780d9935dabc701a4c4832b16c11d7743c399a Certificate serial: 0908EA02BD930329AF2E2AB0C30392750334A7A7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3HgNmTXavHAaTEgysWwR13Q8OZo.cer Subject info access: rsync://rsync.krill.nlnetlabs.nl/repo/nlnetlabs/1/DC780D9935DABC701A4C4832B16C11D7743C399A.mft Manifest number: 0180 Signing time: Tue 12 May 2026 16:59:58 +0000 Manifest this update: Tue 12 May 2026 16:54:58 +0000 Manifest next update: Wed 13 May 2026 20:17:58 +0000 Files and hashes: 1: 326130343a623930353a3a2f34382d3438203d3e203136353039.roa (hash: 2WLi+yTCoT6MxCiLFaQP7kK5t5x+CtSSj0mzxVLx03Y=) 2: 3138352e34392e3134302e302f32332d3233203d3e2038353837.roa (hash: bG62lXPn1Km32GF1V4Mpr+78+uhtW45az4faRRcPToY=) 3: 3138352e34392e3134322e302f32332d3233203d3e20323131333231.roa (hash: jR+qYDFgs1RFLmTf7rqpUDak54gW5tVDwGwUk/IhO4s=) 4: 326130343a623930363a3a2f34382d3438203d3e2030.roa (hash: rzyLuLQB2r5jFPz4ER372UgwfaN2meO05T5dDI5hqUg=) 5: 326130343a623930343a3a2f34382d3438203d3e20323131333231.roa (hash: XACd90ki63AXfGn+taSfXn0bg5k/VvTu6qRBsyyOiUc=) 6: DC780D9935DABC701A4C4832B16C11D7743C399A.crl (hash: QucCtQnliZVJ50jhuJjJMxekOCTbhK4ekzISw7b2BuY=) 7: 326130343a623930323a3a2f34382d3438203d3e20323131333231.roa (hash: qdL0+PphZnX4cdypWsOWZjkH1FNw49MUNv/FrNDrY3s=) 8: 326130343a623930303a3a2f33302d3332203d3e2038353837.roa (hash: YouEGWqx2GG1gNyKDzMvqaRmGag9lv2eJQyjBwSYn9Y=) 9: 3138352e34392e3134322e302f32342d3234203d3e2030.roa (hash: OFYzxf950q78iFTJtOczlCYpNOX+DOEpFZuRWUO9N6w=) 10: 3138352e34392e3134332e302f32342d3234203d3e20323131333231.roa (hash: UL7yBA1F7ergECjM7xK45EYvQh4BIa6w098X6gj/00E=) 11: 326130343a623930343a373230303a3a2f34302d3430203d3e20323131333231.roa (hash: refEY6cMSdDY7cBVUX5w6R5vf51PxokJ+N8DMMimo3o=) 12: 326130343a623930373a3a2f34382d3438203d3e2030.roa (hash: /xnxiOeZe4RUPZsXL0vjp7QXRGVs8BxZ08hPmiOocY8=) 13: C8623AA6C30FA8E058243708F5672D7960E52389.cer (hash: qDS/meVpMF7qgfPtayVFbWOCnAfvA9XikJALxZNw670=) 14: 326130343a623930303a3a2f33302d3330203d3e2038353837.roa (hash: gYkRIFE7UL0cJEwnwxVcLo1Ut87kd9a2aqmOVqa5baI=) 15: 326130343a623930373a3a2f34372d3437203d3e20323131333231.roa (hash: eSgn8pAntXBevn2NWK+HjwLFj3TRH0aVr1zTI6ST4E0=) Validation: OK Signature path: rsync://rsync.krill.nlnetlabs.nl/repo/nlnetlabs/1/DC780D9935DABC701A4C4832B16C11D7743C399A.crl rsync://rsync.krill.nlnetlabs.nl/repo/nlnetlabs/1/DC780D9935DABC701A4C4832B16C11D7743C399A.mft rsync://rpki.ripe.net/repository/DEFAULT/3HgNmTXavHAaTEgysWwR13Q8OZo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 13 May 2026 14:18:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 09:08:ea:02:bd:93:03:29:af:2e:2a:b0:c3:03:92:75:03:34:a7:a7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dc780d9935dabc701a4c4832b16c11d7743c399a Validity Not Before: May 12 16:54:58 2026 GMT Not After : May 13 20:17:58 2026 GMT Subject: CN=AACE67CC05A6E4154C6368C9E56555B90F9D88C7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:b8:51:f3:a6:13:e0:ec:b6:2e:8b:f5:41:a5: 09:77:c1:bc:60:c7:43:b5:d9:40:d5:a5:61:e4:d6: b1:f1:36:70:d4:71:07:78:f6:63:92:aa:c6:0d:59: 41:75:9c:6e:83:57:98:4d:4f:72:c7:7e:ba:eb:71: f8:5d:8c:a2:ea:49:1c:19:cc:57:f4:60:3b:ad:3c: d1:90:77:bb:0a:6d:0f:25:50:0f:11:a3:b1:05:8a: 92:25:ba:f7:6d:29:71:3e:1f:75:9b:c4:f2:4f:3f: c5:1e:1b:22:25:b6:e9:12:3c:50:0e:fe:bc:47:24: 36:2b:22:21:75:b5:d5:21:5c:60:f2:72:39:0f:3e: 31:a7:08:46:9d:2e:cd:f8:68:cc:e8:c8:fb:c3:df: aa:03:05:f5:cf:bf:83:e1:08:0e:b1:ee:60:4e:77: 95:eb:aa:2d:e1:b0:3c:d1:19:d6:cf:9c:80:1a:a6: fb:5b:b3:96:5f:6b:d7:2d:99:c4:05:48:66:a2:a9: 11:69:2a:6c:1b:e6:5e:7e:a1:e0:6c:d6:b0:bd:6b: c3:b1:04:2b:17:0b:c7:12:52:30:f1:7d:ac:f8:23: 5d:36:f8:b0:00:e5:8b:a6:a9:7f:4b:98:b3:e8:66: 0d:bd:dd:36:77:92:75:b5:ec:23:ae:50:03:bf:1f: 9b:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:CE:67:CC:05:A6:E4:15:4C:63:68:C9:E5:65:55:B9:0F:9D:88:C7 X509v3 Authority Key Identifier: keyid:DC:78:0D:99:35:DA:BC:70:1A:4C:48:32:B1:6C:11:D7:74:3C:39:9A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.krill.nlnetlabs.nl/repo/nlnetlabs/1/DC780D9935DABC701A4C4832B16C11D7743C399A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3HgNmTXavHAaTEgysWwR13Q8OZo.cer Subject Information Access: Signed Object - URI:rsync://rsync.krill.nlnetlabs.nl/repo/nlnetlabs/1/DC780D9935DABC701A4C4832B16C11D7743C399A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7b:be:a7:99:11:1f:be:35:46:a3:9a:91:5e:3b:4c:62:4a:cc: 2b:32:6e:31:21:6e:9e:43:2d:62:d7:61:1a:e1:19:98:37:9c: e8:99:7d:9d:2d:56:d8:c8:d7:33:be:51:ce:4b:29:7d:e7:a3: ba:5a:7e:91:fc:74:4c:ee:f8:f5:f4:58:06:c8:c5:b8:0e:bf: 1d:ff:dc:e2:d9:ed:1a:c7:ef:96:d1:cf:4c:56:83:76:7c:2f: 63:c5:58:a3:70:fa:4c:e1:2c:48:aa:76:b5:05:13:37:d8:31: 21:81:0d:65:c8:03:83:58:e6:a0:a5:0d:ec:38:48:bd:fd:b3: 33:f9:16:3b:71:78:81:2f:d3:a9:97:61:4b:bc:0b:96:36:ce: 17:be:92:08:bb:7f:be:73:11:56:d3:0f:70:f7:fd:14:17:5d: 9c:52:17:74:d2:2f:9a:d6:91:93:5c:da:0f:61:fd:d9:07:c5: b0:b6:fc:56:ef:2d:ba:a9:cf:f1:81:f4:5a:c1:60:33:eb:88: b3:51:d4:1c:c4:c6:d7:c4:19:77:cf:4a:83:ba:db:2d:79:df: 5a:e8:c3:c2:79:e5:bf:57:dd:a4:65:8b:52:38:e4:c3:1e:88: 3e:dd:3f:10:d8:62:44:36:f4:6d:c3:33:e0:46:cb:68:10:6f: ba:d7:13:d9 -----BEGIN CERTIFICATE----- MIIE8TCCA9mgAwIBAgIUCQjqAr2TAymvLiqwwwOSdQM0p6cwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoZGM3ODBkOTkzNWRhYmM3MDFhNGM0ODMyYjE2YzExZDc3 NDNjMzk5YTAeFw0yNjA1MTIxNjU0NThaFw0yNjA1MTMyMDE3NThaMDMxMTAvBgNV BAMTKEFBQ0U2N0NDMDVBNkU0MTU0QzYzNjhDOUU1NjU1NUI5MEY5RDg4QzcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCvuFHzphPg7LYui/VBpQl3wbxg x0O12UDVpWHk1rHxNnDUcQd49mOSqsYNWUF1nG6DV5hNT3LHfrrrcfhdjKLqSRwZ zFf0YDutPNGQd7sKbQ8lUA8Ro7EFipIluvdtKXE+H3WbxPJPP8UeGyIltukSPFAO /rxHJDYrIiF1tdUhXGDycjkPPjGnCEadLs34aMzoyPvD36oDBfXPv4PhCA6x7mBO d5Xrqi3hsDzRGdbPnIAapvtbs5Zfa9ctmcQFSGaiqRFpKmwb5l5+oeBs1rC9a8Ox BCsXC8cSUjDxfaz4I102+LAA5YumqX9LmLPoZg293TZ3knW17COuUAO/H5sxAgMB AAGjggH7MIIB9zAdBgNVHQ4EFgQUqs5nzAWm5BVMY2jJ5WVVuQ+diMcwHwYDVR0j BBgwFoAU3HgNmTXavHAaTEgysWwR13Q8OZowDgYDVR0PAQH/BAQDAgeAMG8GA1Ud HwRoMGYwZKBioGCGXnJzeW5jOi8vcnN5bmMua3JpbGwubmxuZXRsYWJzLm5sL3Jl cG8vbmxuZXRsYWJzLzEvREM3ODBEOTkzNURBQkM3MDFBNEM0ODMyQjE2QzExRDc3 NDNDMzk5QS5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzov L3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzNIZ05tVFhhdkhBYVRF Z3lzV3dSMTNROE9aby5jZXIwegYIKwYBBQUHAQsEbjBsMGoGCCsGAQUFBzALhl5y c3luYzovL3JzeW5jLmtyaWxsLm5sbmV0bGFicy5ubC9yZXBvL25sbmV0bGFicy8x L0RDNzgwRDk5MzVEQUJDNzAxQTRDNDgzMkIxNkMxMUQ3NzQzQzM5OUEubWZ0MBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgAB BQAwBgQCAAIFADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUA A4IBAQB7vqeZER++NUajmpFeO0xiSswrMm4xIW6eQy1i12Ea4RmYN5zomX2dLVbY yNczvlHOSyl956O6Wn6R/HRM7vj19FgGyMW4Dr8d/9zi2e0ax++W0c9MVoN2fC9j xVijcPpM4SxIqna1BRM32DEhgQ1lyAODWOagpQ3sOEi9/bMz+RY7cXiBL9Opl2FL vAuWNs4XvpIIu3++cxFW0w9w9/0UF12cUhd00i+a1pGTXNoPYf3ZB8WwtvxW7y26 qc/xgfRawWAz64izUdQcxMbXxBl3z0qDutsted9a6MPCeeW/V92kZYtSOOTDHog+ 3T8Q2GJENvRtwzPgRstoEG+61xPZ -----END CERTIFICATE-----Generated at Tue May 12 22:12:14 2026 by rpki-client