$ rpki-client -vvf rsync.krill.nlnetlabs.nl/repo/nlnetlabs/1/DC780D9935DABC701A4C4832B16C11D7743C399A.mft File: DC780D9935DABC701A4C4832B16C11D7743C399A.mft (raw, json) Hash identifier: qYe6fzXFXOptflNBNhXVk7pvNhc2gSWH2wUPu+JeTNE= Subject key identifier: 64:19:10:0E:B9:69:00:E7:32:84:FF:3A:19:3E:67:F3:3A:56:8A:31 Authority key identifier: DC:78:0D:99:35:DA:BC:70:1A:4C:48:32:B1:6C:11:D7:74:3C:39:9A Certificate issuer: /CN=dc780d9935dabc701a4c4832b16c11d7743c399a Certificate serial: 3E4C083F158AF9CDFDEBBDEA39588F8419F8BA14 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3HgNmTXavHAaTEgysWwR13Q8OZo.cer Subject info access: rsync://rsync.krill.nlnetlabs.nl/repo/nlnetlabs/1/DC780D9935DABC701A4C4832B16C11D7743C399A.mft Manifest number: 01E1 Signing time: Thu 23 Jul 2026 18:50:22 +0000 Manifest this update: Thu 23 Jul 2026 18:45:22 +0000 Manifest next update: Fri 24 Jul 2026 19:53:22 +0000 Files and hashes: 1: 326130343a623930343a3a2f34382d3438203d3e20323131333231.roa (hash: uEPfzD+wbnhTwsVWW/UrDfMoUMKBuHi0vPl0IGNr7n4=) 2: 326130343a623930353a3a2f34382d3438203d3e203136353039.roa (hash: d+iw2diCkJRaNGhzIf4J/JKw8L1IDPPlPbWg6NjYiQ8=) 3: 326130343a623930373a3a2f34382d3438203d3e2030.roa (hash: pEkraM4NhbgBsFbDwa7w6tJcsCMwH3uOz0vykIUzTk8=) 4: 3138352e34392e3134332e302f32342d3234203d3e20323131333231.roa (hash: 0B5YOvITIZWZRxiAsBfwVFBJO8A9+rknJ70VrZXbmhM=) 5: 3138352e34392e3134302e302f32332d3233203d3e2038353837.roa (hash: U8+OIXzaopDuaYf7hsd7liluEK65HTMfxtzOs2eUutU=) 6: 3138352e34392e3134322e302f32342d3234203d3e2030.roa (hash: +h5nxp3r86DxkM+mEV1xj5BP7LH8Lp8uZ6CT1Hi1E54=) 7: 326130343a623930303a3a2f33302d3330203d3e2038353837.roa (hash: YVqDFSJM9BpzA7j/lmc/Km9kXBCWwBuBJnXVpd3c0oA=) 8: 3138352e34392e3134322e302f32332d3233203d3e20323131333231.roa (hash: G71RBaKhsjP596XjbfAcbZmTzgSOwVARGZ/mPeB9am8=) 9: 326130343a623930373a3a2f34372d3437203d3e20323131333231.roa (hash: q5XBQbeSajkFemFHOP7sJXFLQua3ROC9i4L+KFjqA2Y=) 10: 326130343a623930323a3a2f34382d3438203d3e20323131333231.roa (hash: DvRjC5YVaO6hAiGHU5zPxy3o6I0+1biPcChDZYr62qk=) 11: C8623AA6C30FA8E058243708F5672D7960E52389.cer (hash: xh+MW2FduGLhuo30+/bFrTnjBprE+rX9TK+QGtrFq9E=) 12: 326130343a623930303a3a2f33302d3332203d3e2038353837.roa (hash: mcRkbX+EcmuVG5kbogYs1kTfFjmT6GSDRiWlit7LIEo=) 13: DC780D9935DABC701A4C4832B16C11D7743C399A.crl (hash: 3m2ntyC4u3Z8dbcVtX19RtWoENWu+/EjPV3v7yGQtH4=) 14: 326130343a623930363a3a2f34382d3438203d3e2030.roa (hash: eiOsAFzUoO5n+xOw6ZqDfb1W9mjnMVvG3lh8Uszxqbc=) 15: 326130343a623930343a373230303a3a2f34302d3430203d3e20323131333231.roa (hash: refEY6cMSdDY7cBVUX5w6R5vf51PxokJ+N8DMMimo3o=) Validation: OK Signature path: rsync://rsync.krill.nlnetlabs.nl/repo/nlnetlabs/1/DC780D9935DABC701A4C4832B16C11D7743C399A.crl rsync://rsync.krill.nlnetlabs.nl/repo/nlnetlabs/1/DC780D9935DABC701A4C4832B16C11D7743C399A.mft rsync://rpki.ripe.net/repository/DEFAULT/3HgNmTXavHAaTEgysWwR13Q8OZo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 24 Jul 2026 19:53:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3e:4c:08:3f:15:8a:f9:cd:fd:eb:bd:ea:39:58:8f:84:19:f8:ba:14 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dc780d9935dabc701a4c4832b16c11d7743c399a Validity Not Before: Jul 23 18:45:22 2026 GMT Not After : Jul 24 19:53:22 2026 GMT Subject: CN=6419100EB96900E73284FF3A193E67F33A568A31 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f2:ef:25:0e:f5:1c:75:ef:74:76:d0:d3:1b:dd: 43:90:64:2c:e9:08:68:f4:1b:aa:c6:f1:23:24:fc: 61:f1:c7:17:2a:af:82:0d:93:f2:1e:d0:6d:20:18: 54:01:76:0e:4f:2d:ac:e9:b3:d5:3a:ec:9f:62:8e: 93:57:1f:88:a1:ef:e8:77:a0:7b:f7:ba:99:11:63: 64:66:d1:ce:c3:8c:98:f9:8f:f6:f6:22:37:ba:a9: a5:14:ff:ff:e6:b7:fc:c4:7e:2e:38:29:93:50:de: 32:ee:cd:5e:c6:61:7a:fe:3b:e9:7c:e0:67:af:32: 0b:d3:47:40:a4:07:8b:ce:95:17:de:ec:e1:23:5a: 6d:c3:e4:b2:b3:31:ea:5f:af:65:b4:b6:a6:c1:8a: 34:0b:33:e5:17:1f:be:21:fa:5a:86:8a:20:77:ac: 5c:83:3d:51:5c:da:9d:e2:fc:a7:80:0a:3c:8f:57: 71:17:21:70:13:96:e3:90:a1:a9:7a:1c:96:0b:80: eb:e5:aa:ae:ed:85:7d:93:06:af:e9:ea:0c:6e:ea: be:d3:df:3c:cb:f6:00:e8:8a:ae:2c:22:18:4b:72: e8:db:6e:be:a6:ce:e1:db:d6:cd:77:a5:9c:39:00: 8d:40:30:1c:10:eb:b5:8e:07:5f:0a:4d:90:b3:5d: 5a:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:19:10:0E:B9:69:00:E7:32:84:FF:3A:19:3E:67:F3:3A:56:8A:31 X509v3 Authority Key Identifier: keyid:DC:78:0D:99:35:DA:BC:70:1A:4C:48:32:B1:6C:11:D7:74:3C:39:9A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.krill.nlnetlabs.nl/repo/nlnetlabs/1/DC780D9935DABC701A4C4832B16C11D7743C399A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3HgNmTXavHAaTEgysWwR13Q8OZo.cer Subject Information Access: Signed Object - URI:rsync://rsync.krill.nlnetlabs.nl/repo/nlnetlabs/1/DC780D9935DABC701A4C4832B16C11D7743C399A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 24:e2:ca:d4:58:50:d8:42:ed:0d:c0:f1:d7:3f:f0:de:29:e5: 45:fd:32:78:0b:1d:df:52:eb:b1:79:ac:c5:09:cf:57:3e:99: 0a:d5:a2:a6:ee:67:49:81:48:ac:87:e3:4e:76:44:16:9d:9e: 55:79:fc:86:33:81:cf:20:50:f9:46:a8:a0:5a:01:b6:02:b5: 95:97:9f:0b:bc:65:c3:bb:61:e5:91:f3:5b:c4:df:5a:1b:eb: fe:97:bc:3a:2f:3b:9e:0a:d3:16:60:6c:6f:93:5e:da:db:6e: 09:76:c0:73:8b:a5:ea:38:8d:10:9b:29:75:dc:f8:36:46:64: a1:a9:56:59:e5:27:51:6d:e3:b6:21:0c:d8:dd:17:10:23:d8: 22:b6:f9:57:a4:69:83:b9:fa:c5:cb:f4:da:3f:bb:be:52:f7: 98:36:c5:a8:d1:8d:b9:05:f5:6b:1d:ca:45:ff:aa:13:6d:71: 20:6f:f6:83:ae:58:e6:b2:31:62:b5:4b:4e:2b:70:d2:3a:08: 11:d1:5b:f2:aa:d2:2f:aa:11:9a:68:67:ed:d6:82:f9:f0:65: 15:08:d9:fe:36:bf:81:e4:71:f7:fc:b0:73:82:16:5d:32:68: 73:f8:79:3c:42:94:4e:34:8a:45:06:64:8e:9c:2f:2f:1e:55: 61:c1:ba:33 -----BEGIN CERTIFICATE----- MIIE8TCCA9mgAwIBAgIUPkwIPxWK+c39673qOViPhBn4uhQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoZGM3ODBkOTkzNWRhYmM3MDFhNGM0ODMyYjE2YzExZDc3 NDNjMzk5YTAeFw0yNjA3MjMxODQ1MjJaFw0yNjA3MjQxOTUzMjJaMDMxMTAvBgNV BAMTKDY0MTkxMDBFQjk2OTAwRTczMjg0RkYzQTE5M0U2N0YzM0E1NjhBMzEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDy7yUO9Rx173R20NMb3UOQZCzp CGj0G6rG8SMk/GHxxxcqr4INk/Ie0G0gGFQBdg5PLazps9U67J9ijpNXH4ih7+h3 oHv3upkRY2Rm0c7DjJj5j/b2Ije6qaUU///mt/zEfi44KZNQ3jLuzV7GYXr+O+l8 4GevMgvTR0CkB4vOlRfe7OEjWm3D5LKzMepfr2W0tqbBijQLM+UXH74h+lqGiiB3 rFyDPVFc2p3i/KeACjyPV3EXIXATluOQoal6HJYLgOvlqq7thX2TBq/p6gxu6r7T 3zzL9gDoiq4sIhhLcujbbr6mzuHb1s13pZw5AI1AMBwQ67WOB18KTZCzXVpRAgMB AAGjggH7MIIB9zAdBgNVHQ4EFgQUZBkQDrlpAOcyhP86GT5n8zpWijEwHwYDVR0j BBgwFoAU3HgNmTXavHAaTEgysWwR13Q8OZowDgYDVR0PAQH/BAQDAgeAMG8GA1Ud HwRoMGYwZKBioGCGXnJzeW5jOi8vcnN5bmMua3JpbGwubmxuZXRsYWJzLm5sL3Jl cG8vbmxuZXRsYWJzLzEvREM3ODBEOTkzNURBQkM3MDFBNEM0ODMyQjE2QzExRDc3 NDNDMzk5QS5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzov L3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzNIZ05tVFhhdkhBYVRF Z3lzV3dSMTNROE9aby5jZXIwegYIKwYBBQUHAQsEbjBsMGoGCCsGAQUFBzALhl5y c3luYzovL3JzeW5jLmtyaWxsLm5sbmV0bGFicy5ubC9yZXBvL25sbmV0bGFicy8x L0RDNzgwRDk5MzVEQUJDNzAxQTRDNDgzMkIxNkMxMUQ3NzQzQzM5OUEubWZ0MBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgAB BQAwBgQCAAIFADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUA A4IBAQAk4srUWFDYQu0NwPHXP/DeKeVF/TJ4Cx3fUuuxeazFCc9XPpkK1aKm7mdJ gUish+NOdkQWnZ5VefyGM4HPIFD5RqigWgG2ArWVl58LvGXDu2HlkfNbxN9aG+v+ l7w6LzueCtMWYGxvk17a224JdsBzi6XqOI0Qmyl13Pg2RmShqVZZ5SdRbeO2IQzY 3RcQI9gitvlXpGmDufrFy/TaP7u+UveYNsWo0Y25BfVrHcpF/6oTbXEgb/aDrljm sjFitUtOK3DSOggR0VvyqtIvqhGaaGft1oL58GUVCNn+Nr+B5HH3/LBzghZdMmhz +Hk8QpRONIpFBmSOnC8vHlVhwboz -----END CERTIFICATE-----Generated at Fri Jul 24 05:05:23 2026 by rpki-client