$ rpki-client -vvf rsync.krill.nlnetlabs.nl/repo/nlnetlabs/1/DC780D9935DABC701A4C4832B16C11D7743C399A.mft File: DC780D9935DABC701A4C4832B16C11D7743C399A.mft (raw, json) Hash identifier: DaHajRx6HN26k2R5/TKoeGnPpG3eUNR8w4R/r2wzhWs= Subject key identifier: B8:1F:E2:4A:F3:41:02:50:C4:50:28:87:E2:94:D3:AD:17:46:BD:A7 Authority key identifier: DC:78:0D:99:35:DA:BC:70:1A:4C:48:32:B1:6C:11:D7:74:3C:39:9A Certificate issuer: /CN=dc780d9935dabc701a4c4832b16c11d7743c399a Certificate serial: 11B3A546E0FA7FB6CFB5F284518C9D192359AA17 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3HgNmTXavHAaTEgysWwR13Q8OZo.cer Subject info access: rsync://rsync.krill.nlnetlabs.nl/repo/nlnetlabs/1/DC780D9935DABC701A4C4832B16C11D7743C399A.mft Manifest number: 0140 Signing time: Wed 25 Mar 2026 18:12:49 +0000 Manifest this update: Wed 25 Mar 2026 18:07:49 +0000 Manifest next update: Thu 26 Mar 2026 21:32:49 +0000 Files and hashes: 1: 3138352e34392e3134322e302f32342d3234203d3e2030.roa (hash: OFYzxf950q78iFTJtOczlCYpNOX+DOEpFZuRWUO9N6w=) 2: C8623AA6C30FA8E058243708F5672D7960E52389.cer (hash: qDS/meVpMF7qgfPtayVFbWOCnAfvA9XikJALxZNw670=) 3: 3138352e34392e3134302e302f32332d3233203d3e2038353837.roa (hash: bG62lXPn1Km32GF1V4Mpr+78+uhtW45az4faRRcPToY=) 4: 326130343a623930363a3a2f34382d3438203d3e2030.roa (hash: rzyLuLQB2r5jFPz4ER372UgwfaN2meO05T5dDI5hqUg=) 5: 326130343a623930373a3a2f34382d3438203d3e2030.roa (hash: /xnxiOeZe4RUPZsXL0vjp7QXRGVs8BxZ08hPmiOocY8=) 6: 326130343a623930303a3a2f33302d3332203d3e2038353837.roa (hash: YouEGWqx2GG1gNyKDzMvqaRmGag9lv2eJQyjBwSYn9Y=) 7: 326130343a623930323a3a2f34382d3438203d3e20323131333231.roa (hash: qdL0+PphZnX4cdypWsOWZjkH1FNw49MUNv/FrNDrY3s=) 8: 326130343a623930343a373230303a3a2f34302d3430203d3e20323131333231.roa (hash: refEY6cMSdDY7cBVUX5w6R5vf51PxokJ+N8DMMimo3o=) 9: 3138352e34392e3134322e302f32332d3233203d3e20323131333231.roa (hash: jR+qYDFgs1RFLmTf7rqpUDak54gW5tVDwGwUk/IhO4s=) 10: 326130343a623930353a3a2f34382d3438203d3e203136353039.roa (hash: 2WLi+yTCoT6MxCiLFaQP7kK5t5x+CtSSj0mzxVLx03Y=) 11: 326130343a623930343a3a2f34382d3438203d3e20323131333231.roa (hash: XACd90ki63AXfGn+taSfXn0bg5k/VvTu6qRBsyyOiUc=) 12: 326130343a623930373a3a2f34372d3437203d3e20323131333231.roa (hash: eSgn8pAntXBevn2NWK+HjwLFj3TRH0aVr1zTI6ST4E0=) 13: 326130343a623930303a3a2f33302d3330203d3e2038353837.roa (hash: gYkRIFE7UL0cJEwnwxVcLo1Ut87kd9a2aqmOVqa5baI=) 14: 3138352e34392e3134332e302f32342d3234203d3e20323131333231.roa (hash: UL7yBA1F7ergECjM7xK45EYvQh4BIa6w098X6gj/00E=) 15: DC780D9935DABC701A4C4832B16C11D7743C399A.crl (hash: 4G69WczpcFfUj1vE4a8h+uOl6sP/GWzqQq9WXgrYyMs=) Validation: OK Signature path: rsync://rsync.krill.nlnetlabs.nl/repo/nlnetlabs/1/DC780D9935DABC701A4C4832B16C11D7743C399A.crl rsync://rsync.krill.nlnetlabs.nl/repo/nlnetlabs/1/DC780D9935DABC701A4C4832B16C11D7743C399A.mft rsync://rpki.ripe.net/repository/DEFAULT/3HgNmTXavHAaTEgysWwR13Q8OZo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 26 Mar 2026 21:32:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 11:b3:a5:46:e0:fa:7f:b6:cf:b5:f2:84:51:8c:9d:19:23:59:aa:17 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dc780d9935dabc701a4c4832b16c11d7743c399a Validity Not Before: Mar 25 18:07:49 2026 GMT Not After : Mar 26 21:32:49 2026 GMT Subject: CN=B81FE24AF3410250C4502887E294D3AD1746BDA7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:ab:3a:4d:95:fb:f2:7b:a5:c8:e8:b0:84:07: 52:c2:c7:44:5f:fe:e5:0c:9c:90:4f:3e:78:05:11: fe:79:7c:49:77:58:5d:2f:74:b7:d9:30:be:6e:d7: f9:63:0c:37:d9:f3:09:52:38:89:be:01:da:32:0c: d7:fe:0c:95:59:44:47:6f:69:db:6b:24:44:5d:e3: 0f:b9:a2:df:05:d1:a6:d8:fe:9b:30:e0:f6:2b:1a: 48:13:a0:e8:b9:15:04:2f:34:72:0f:84:26:05:dd: f4:a0:cd:2a:7e:3d:61:a9:e3:7a:01:12:22:ac:de: e6:98:9a:eb:76:ee:26:68:e4:51:4f:39:fd:f9:ea: 3e:b2:ac:47:59:e6:c9:ad:8e:71:81:ac:9b:0a:d7: c4:18:53:b6:74:ef:ce:77:bb:8e:d8:70:fb:f9:58: b2:8e:1b:c5:5a:24:0f:3d:f8:11:e6:8e:63:07:56: e8:dd:54:4e:d1:06:fe:09:7a:c6:6c:35:69:51:e4: 24:32:8f:d3:88:50:2c:f6:3e:04:1d:3e:1a:c2:82: b5:37:34:1c:56:0f:b9:fe:80:22:04:df:e5:24:5e: f2:ba:3e:0f:12:ad:50:7f:c6:86:88:36:7e:b8:7d: 48:b9:1c:d7:27:f7:49:47:d8:38:01:16:a0:02:67: 92:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:1F:E2:4A:F3:41:02:50:C4:50:28:87:E2:94:D3:AD:17:46:BD:A7 X509v3 Authority Key Identifier: keyid:DC:78:0D:99:35:DA:BC:70:1A:4C:48:32:B1:6C:11:D7:74:3C:39:9A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.krill.nlnetlabs.nl/repo/nlnetlabs/1/DC780D9935DABC701A4C4832B16C11D7743C399A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3HgNmTXavHAaTEgysWwR13Q8OZo.cer Subject Information Access: Signed Object - URI:rsync://rsync.krill.nlnetlabs.nl/repo/nlnetlabs/1/DC780D9935DABC701A4C4832B16C11D7743C399A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5d:c9:49:74:87:38:24:73:fe:43:58:0e:30:ba:d8:c3:54:f9: 58:a4:d3:66:5b:17:63:ae:bf:5b:d8:0d:a4:51:b4:d6:4d:41: cb:f0:41:07:a5:04:8f:3b:66:4a:a0:dd:a1:37:60:bd:64:21: 1c:1b:2c:aa:d4:95:47:83:93:39:2f:6f:62:89:59:f6:6e:c9: 79:15:11:9a:bd:55:55:fb:5a:35:02:97:17:be:78:49:ef:b5: be:73:42:50:d0:7c:08:bc:9e:8c:51:c9:4b:99:28:a8:94:3a: 7c:da:8b:af:4c:a3:60:a2:97:dd:f8:71:5b:fc:50:96:00:42: f2:ff:de:73:f8:3e:4f:c4:c9:13:e5:ba:4a:a7:9e:74:0e:93: 94:4b:3b:24:82:8b:2e:16:e7:b3:5e:86:dc:7c:44:55:b0:ed: b8:5f:ad:56:0d:f0:dd:e8:9d:59:e8:29:6d:6a:41:38:a7:bc: a7:11:1f:be:7e:04:8a:f1:14:c5:3d:b8:7e:9d:67:7a:a4:90: f8:38:5f:21:90:da:65:04:fa:ad:b1:7f:6c:bd:38:30:8f:0d: de:c5:1e:4b:21:23:b8:d4:50:eb:1b:2a:c0:17:f5:df:f2:91: 68:a4:7f:7a:4f:f1:00:80:c8:03:2f:15:23:13:a5:16:8f:fb: 94:55:bb:e4 -----BEGIN CERTIFICATE----- MIIE8TCCA9mgAwIBAgIUEbOlRuD6f7bPtfKEUYydGSNZqhcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoZGM3ODBkOTkzNWRhYmM3MDFhNGM0ODMyYjE2YzExZDc3 NDNjMzk5YTAeFw0yNjAzMjUxODA3NDlaFw0yNjAzMjYyMTMyNDlaMDMxMTAvBgNV BAMTKEI4MUZFMjRBRjM0MTAyNTBDNDUwMjg4N0UyOTREM0FEMTc0NkJEQTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1qzpNlfvye6XI6LCEB1LCx0Rf /uUMnJBPPngFEf55fEl3WF0vdLfZML5u1/ljDDfZ8wlSOIm+AdoyDNf+DJVZREdv adtrJERd4w+5ot8F0abY/psw4PYrGkgToOi5FQQvNHIPhCYF3fSgzSp+PWGp43oB EiKs3uaYmut27iZo5FFPOf356j6yrEdZ5smtjnGBrJsK18QYU7Z07853u47YcPv5 WLKOG8VaJA89+BHmjmMHVujdVE7RBv4JesZsNWlR5CQyj9OIUCz2PgQdPhrCgrU3 NBxWD7n+gCIE3+UkXvK6Pg8SrVB/xoaINn64fUi5HNcn90lH2DgBFqACZ5K3AgMB AAGjggH7MIIB9zAdBgNVHQ4EFgQUuB/iSvNBAlDEUCiH4pTTrRdGvacwHwYDVR0j BBgwFoAU3HgNmTXavHAaTEgysWwR13Q8OZowDgYDVR0PAQH/BAQDAgeAMG8GA1Ud HwRoMGYwZKBioGCGXnJzeW5jOi8vcnN5bmMua3JpbGwubmxuZXRsYWJzLm5sL3Jl cG8vbmxuZXRsYWJzLzEvREM3ODBEOTkzNURBQkM3MDFBNEM0ODMyQjE2QzExRDc3 NDNDMzk5QS5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzov L3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzNIZ05tVFhhdkhBYVRF Z3lzV3dSMTNROE9aby5jZXIwegYIKwYBBQUHAQsEbjBsMGoGCCsGAQUFBzALhl5y c3luYzovL3JzeW5jLmtyaWxsLm5sbmV0bGFicy5ubC9yZXBvL25sbmV0bGFicy8x L0RDNzgwRDk5MzVEQUJDNzAxQTRDNDgzMkIxNkMxMUQ3NzQzQzM5OUEubWZ0MBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgAB BQAwBgQCAAIFADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUA A4IBAQBdyUl0hzgkc/5DWA4wutjDVPlYpNNmWxdjrr9b2A2kUbTWTUHL8EEHpQSP O2ZKoN2hN2C9ZCEcGyyq1JVHg5M5L29iiVn2bsl5FRGavVVV+1o1ApcXvnhJ77W+ c0JQ0HwIvJ6MUclLmSiolDp82ouvTKNgopfd+HFb/FCWAELy/95z+D5PxMkT5bpK p550DpOUSzskgosuFuezXobcfERVsO24X61WDfDd6J1Z6CltakE4p7ynER++fgSK 8RTFPbh+nWd6pJD4OF8hkNplBPqtsX9svTgwjw3exR5LISO41FDrGyrAF/Xf8pFo pH96T/EAgMgDLxUjE6UWj/uUVbvk -----END CERTIFICATE-----Generated at Thu Mar 26 04:34:53 2026 by rpki-client