$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/42/f4004b-d602-475d-931b-7e05ad0190ce/1/r16T-QI1TOSAS0ywSc9osg92rrI.mft File: r16T-QI1TOSAS0ywSc9osg92rrI.mft (raw, json) Hash identifier: 5DMeGPCA4s2rgOJI3oQgWuLeu1iVkiFdW/CWfdwzH6I= Subject key identifier: 3F:1D:49:F9:08:B2:EE:AD:DC:B6:D1:C9:1E:13:D3:A5:48:FA:05:33 Authority key identifier: AF:5E:93:F9:02:35:4C:E4:80:4B:4C:B0:49:CF:68:B2:0F:76:AE:B2 Certificate issuer: /CN=af5e93f902354ce4804b4cb049cf68b20f76aeb2 Certificate serial: 01A1DC826967DAE66F97C791D0F3F3B6D855 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r16T-QI1TOSAS0ywSc9osg92rrI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/f4004b-d602-475d-931b-7e05ad0190ce/1/r16T-QI1TOSAS0ywSc9osg92rrI.mft Manifest number: 1789 Signing time: Sun 15 Nov 2026 00:01:36 +0000 Manifest this update: Sun 15 Nov 2026 00:01:36 +0000 Manifest next update: Mon 16 Nov 2026 00:01:36 +0000 Files and hashes: 1: 76SUa31tX84MMYV-5pJtl_RzfBs.roa (hash: VLwC/xTHEJsdM4oEbJXYgc2X6KgnqYrx1To2cyFfsks=) 2: EQyiKX_7-Wpxq09KJocOiD7iVtg.roa (hash: xSHc+sset4mHHx5Au4SFQGD7gPC3y5Gef/MK9s8Iy4Y=) 3: IqvcRngzlVCtX_OA-70dAZLFdA8.roa (hash: aY3f5nvXyrfMF4R4lR/AbKv7PaJsmbQ5UoA1+i35Mzo=) 4: J6RUNAmoogv7zgMLcCOwk_cTSbw.roa (hash: g+8OdmE2eYFbsqzauS740Ewhw4IU7T/U1OEITUeBDc4=) 5: JYSE_79beIVH7AyGREwVYhRCyTY.roa (hash: l3baob39qaOOP1HD2nUjVfG8gYEyw7b1MgZubnhYeyE=) 6: LlTZm9TRn88VWou6DKeJrZdQgvU.roa (hash: GTQExs7+EOPrcDE70ZQ1HXMC0yUw4J5W6WVSW6HNDyE=) 7: O-CoG-YF7L6hwLeg3uly4Kp8B_8.roa (hash: 5oJU3WpHWPREk+VpJtji8wlNog6GMZ8hQeRSHT6lLd0=) 8: U2Yc5skQvePijZYsWlFophc_BK4.roa (hash: gMfZmKyaceaZgToU/WPMcQ0QQiGVzdWPQc5qXxtNrpw=) 9: WMiYfXfaecilSx0Cw11AX6GHoD0.roa (hash: tfANuqYEsqBC9djOQlOpVgZbpkAcWNv/SHctNZh0ths=) 10: YLu7TqT2RSl1_BNUUxUt12edQaA.roa (hash: paF/KBHEk0JOZSKhbJ4oeNoOGAfMADsXOpIZVHL7RNY=) 11: aQ88EoiiajhYjpR8X9YSC2Itufk.roa (hash: 6ocE7SCCa9OYWlhJzkmE5ODfDYPaMsMSbmqpzzbM+qk=) 12: bKeksz2w4uplaCPFhGd2ZRXJ3L4.roa (hash: V3eyRTLr62Od4hxpOj09Jq4Nekd36hyzHMFde1nQKHM=) 13: cNrzpnZVR-vdGnfMmjiDxUQw38w.roa (hash: jDSBudPBssvuTBaPnXNJhRgSYVM03+9BoPvraHbjsUs=) 14: hOWBX1aqOOkBBDPmSf04HK0FDdQ.roa (hash: TNZ6xI5xHtE38+sW0p4MVYqN1AjK+nGsdspXM65hmqg=) 15: hpQK8Ct69QedB3MH-Zduh7fwfI0.roa (hash: tMKgnvO9EBwmVGsim8vR529voYsTaPvcU9t25lxh9c8=) 16: lE9bYROvMOgfAcJMOq1buSFu5Oc.roa (hash: uM/UbNoBafoN3u4NQaCJ1CV+W48Aj8GUgTcEvh/o4kw=) 17: r16T-QI1TOSAS0ywSc9osg92rrI.crl (hash: TDMrIuYJSHXZcTv5IdOi+G3FU43Io9aDmC6gz8MtNCs=) 18: sp2MMK9YRqm89c-c8Nk0zqZ0hl0.roa (hash: 4AR1dpezwOfRG52yq/YaU//Ei5bTQmeOkpGOb7/yTjo=) 19: xSn7ixxST4P6sLWhFGPF1kgNAlE.roa (hash: 6Zt2rctbn7D8+hho9smzj15xitIYg/ED9s7TTA4i/jk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/f4004b-d602-475d-931b-7e05ad0190ce/1/r16T-QI1TOSAS0ywSc9osg92rrI.crl rsync://rpki.ripe.net/repository/DEFAULT/42/f4004b-d602-475d-931b-7e05ad0190ce/1/r16T-QI1TOSAS0ywSc9osg92rrI.mft rsync://rpki.ripe.net/repository/DEFAULT/r16T-QI1TOSAS0ywSc9osg92rrI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 16 Nov 2026 00:01:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a1:dc:82:69:67:da:e6:6f:97:c7:91:d0:f3:f3:b6:d8:55 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=af5e93f902354ce4804b4cb049cf68b20f76aeb2 Validity Not Before: Nov 15 00:01:36 2026 GMT Not After : Nov 16 00:01:36 2026 GMT Subject: CN=3f1d49f908b2eeaddcb6d1c91e13d3a548fa0533 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:8c:56:7b:f8:fa:5d:aa:9a:47:3d:4b:78:32: 19:31:94:59:cc:46:83:1e:fe:1f:b6:a9:26:18:72: 35:ff:53:da:2c:2a:e6:f8:ea:d4:73:0c:53:8c:d8: 45:18:9b:2f:0c:f5:71:ff:55:cd:5f:80:68:55:e5: ae:9c:d8:bc:e0:00:32:f1:ce:62:e5:51:2c:fb:f5: ef:f2:4e:fc:70:11:ec:c6:2f:5c:14:73:72:de:aa: 7e:64:84:8b:1b:16:91:0b:62:54:17:85:d1:63:80: b4:f9:c2:c3:7d:62:43:75:37:be:95:36:aa:e1:f3: b6:74:e0:f3:c8:a0:f9:ce:52:45:97:e6:80:fc:86: a2:5e:77:d4:c8:4e:1e:d2:04:1a:f8:aa:81:82:cb: 4e:59:50:8b:55:c4:4a:05:a0:7f:a2:ac:7f:30:0d: a4:47:51:c1:51:45:2f:a5:32:af:63:92:13:4c:6f: 8c:d3:3e:57:60:e9:e9:5f:9c:28:c3:f9:dd:41:70: aa:fa:73:5b:e3:bb:c0:d9:92:94:13:9a:55:5c:30: 6d:97:ae:00:b9:fb:e7:b2:7e:4a:39:8f:cf:63:95: 0b:ea:c0:3d:40:cc:a8:36:c1:bc:76:94:22:ba:5c: e7:11:12:60:85:7f:21:1d:25:96:26:9d:b3:e5:c7: f5:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:1D:49:F9:08:B2:EE:AD:DC:B6:D1:C9:1E:13:D3:A5:48:FA:05:33 X509v3 Authority Key Identifier: keyid:AF:5E:93:F9:02:35:4C:E4:80:4B:4C:B0:49:CF:68:B2:0F:76:AE:B2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r16T-QI1TOSAS0ywSc9osg92rrI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/f4004b-d602-475d-931b-7e05ad0190ce/1/r16T-QI1TOSAS0ywSc9osg92rrI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/42/f4004b-d602-475d-931b-7e05ad0190ce/1/r16T-QI1TOSAS0ywSc9osg92rrI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 63:9a:51:05:3a:11:65:75:a7:1d:33:55:b7:ca:9e:ac:0a:71: dc:6f:9d:67:64:95:ed:0f:ff:2c:9d:09:80:8e:02:8e:01:ff: 53:9b:c1:72:98:78:8b:11:2d:a8:ba:33:a0:e2:71:9a:e9:74: ca:ac:4b:c5:d9:f3:b6:12:dc:b5:8a:1f:53:93:9c:f1:b0:90: 6c:4f:a2:24:06:44:11:fb:b8:73:72:db:e1:33:5c:14:91:86: a3:60:13:4f:38:f6:32:00:9d:fa:91:c1:39:15:5f:a1:53:75: f3:f9:3b:ea:04:fd:8c:30:ac:91:9f:dc:ff:25:6a:ad:2f:1c: b9:08:ed:9a:cc:b4:7a:31:16:2c:d1:32:f2:3d:cd:56:fd:bb: 09:75:7a:2d:03:39:16:af:1b:ae:f0:a3:73:e7:2b:08:31:3a: 1a:da:61:af:2b:d8:52:7a:97:43:8a:f8:f6:34:c2:29:df:5d: df:81:36:c8:b8:42:04:d3:fe:8e:a5:b5:ee:bd:37:91:0e:37: 7d:aa:de:fe:27:84:4e:1f:04:04:4d:f5:04:32:44:b3:bc:49: c2:a0:d4:60:d1:0e:37:8e:32:16:b9:5e:29:10:0f:5c:01:21: 84:1e:a0:d6:70:04:2a:57:38:62:0f:5a:92:d5:34:16:67:54: 91:53:f5:c2 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaHcgmln2uZvl8eR0PPztthVMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFmNWU5M2Y5MDIzNTRjZTQ4MDRiNGNiMDQ5Y2Y2OGIyMGY3 NmFlYjIwHhcNMjYxMTE1MDAwMTM2WhcNMjYxMTE2MDAwMTM2WjAzMTEwLwYDVQQD EygzZjFkNDlmOTA4YjJlZWFkZGNiNmQxYzkxZTEzZDNhNTQ4ZmEwNTMzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsoxWe/j6XaqaRz1LeDIZMZRZzEaD Hv4ftqkmGHI1/1PaLCrm+OrUcwxTjNhFGJsvDPVx/1XNX4BoVeWunNi84AAy8c5i 5VEs+/Xv8k78cBHsxi9cFHNy3qp+ZISLGxaRC2JUF4XRY4C0+cLDfWJDdTe+lTaq 4fO2dODzyKD5zlJFl+aA/IaiXnfUyE4e0gQa+KqBgstOWVCLVcRKBaB/oqx/MA2k R1HBUUUvpTKvY5ITTG+M0z5XYOnpX5wow/ndQXCq+nNb47vA2ZKUE5pVXDBtl64A ufvnsn5KOY/PY5UL6sA9QMyoNsG8dpQiulznERJghX8hHSWWJp2z5cf1qwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFD8dSfkIsu6t3LbRyR4T06VI+gUzMB8GA1UdIwQY MBaAFK9ek/kCNUzkgEtMsEnPaLIPdq6yMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcjE2VC1RSTFUT1NBUzB5d1NjOW9zZzkycnJJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Mi9mNDAwNGItZDYwMi00NzVkLTkzMWIt N2UwNWFkMDE5MGNlLzEvcjE2VC1RSTFUT1NBUzB5d1NjOW9zZzkycnJJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Mi9mNDAwNGItZDYwMi00NzVkLTkzMWItN2UwNWFkMDE5MGNl LzEvcjE2VC1RSTFUT1NBUzB5d1NjOW9zZzkycnJJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAY5pRBToR ZXWnHTNVt8qerApx3G+dZ2SV7Q//LJ0JgI4CjgH/U5vBcph4ixEtqLozoOJxmul0 yqxLxdnzthLctYofU5Oc8bCQbE+iJAZEEfu4c3Lb4TNcFJGGo2ATTzj2MgCd+pHB ORVfoVN18/k76gT9jDCskZ/c/yVqrS8cuQjtmsy0ejEWLNEy8j3NVv27CXV6LQM5 Fq8brvCjc+crCDE6GtphryvYUnqXQ4r49jTCKd9d34E2yLhCBNP+jqW17r03kQ43 fare/ieETh8EBE31BDJEs7xJwqDUYNEON44yFrleKRAPXAEhhB6g1nAEKlc4Yg9a ktU0FmdUkVP1wg== -----END CERTIFICATE-----Generated at Sun Nov 15 11:13:07 2026 by rpki-client