$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/42/f4004b-d602-475d-931b-7e05ad0190ce/1/r16T-QI1TOSAS0ywSc9osg92rrI.mft File: r16T-QI1TOSAS0ywSc9osg92rrI.mft (raw, json) Hash identifier: dj8O8FO3SU3thjNWy2HB0JfnwKd/m8yaA7GxNBLLhtk= Subject key identifier: 11:1A:7C:15:A1:07:D5:FF:C5:75:6D:70:63:C7:ED:17:39:B7:4E:02 Authority key identifier: AF:5E:93:F9:02:35:4C:E4:80:4B:4C:B0:49:CF:68:B2:0F:76:AE:B2 Certificate issuer: /CN=af5e93f902354ce4804b4cb049cf68b20f76aeb2 Certificate serial: 01A0D3F00A918ED33B229E1E8E75A5E125EB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r16T-QI1TOSAS0ywSc9osg92rrI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/f4004b-d602-475d-931b-7e05ad0190ce/1/r16T-QI1TOSAS0ywSc9osg92rrI.mft Manifest number: 1700 Signing time: Thu 24 Sep 2026 15:01:58 +0000 Manifest this update: Thu 24 Sep 2026 15:01:58 +0000 Manifest next update: Fri 25 Sep 2026 15:01:58 +0000 Files and hashes: 1: 76SUa31tX84MMYV-5pJtl_RzfBs.roa (hash: VLwC/xTHEJsdM4oEbJXYgc2X6KgnqYrx1To2cyFfsks=) 2: EQyiKX_7-Wpxq09KJocOiD7iVtg.roa (hash: xSHc+sset4mHHx5Au4SFQGD7gPC3y5Gef/MK9s8Iy4Y=) 3: IqvcRngzlVCtX_OA-70dAZLFdA8.roa (hash: aY3f5nvXyrfMF4R4lR/AbKv7PaJsmbQ5UoA1+i35Mzo=) 4: J6RUNAmoogv7zgMLcCOwk_cTSbw.roa (hash: g+8OdmE2eYFbsqzauS740Ewhw4IU7T/U1OEITUeBDc4=) 5: JYSE_79beIVH7AyGREwVYhRCyTY.roa (hash: l3baob39qaOOP1HD2nUjVfG8gYEyw7b1MgZubnhYeyE=) 6: LlTZm9TRn88VWou6DKeJrZdQgvU.roa (hash: GTQExs7+EOPrcDE70ZQ1HXMC0yUw4J5W6WVSW6HNDyE=) 7: O-CoG-YF7L6hwLeg3uly4Kp8B_8.roa (hash: 5oJU3WpHWPREk+VpJtji8wlNog6GMZ8hQeRSHT6lLd0=) 8: U2Yc5skQvePijZYsWlFophc_BK4.roa (hash: gMfZmKyaceaZgToU/WPMcQ0QQiGVzdWPQc5qXxtNrpw=) 9: WMiYfXfaecilSx0Cw11AX6GHoD0.roa (hash: tfANuqYEsqBC9djOQlOpVgZbpkAcWNv/SHctNZh0ths=) 10: YLu7TqT2RSl1_BNUUxUt12edQaA.roa (hash: paF/KBHEk0JOZSKhbJ4oeNoOGAfMADsXOpIZVHL7RNY=) 11: aQ88EoiiajhYjpR8X9YSC2Itufk.roa (hash: 6ocE7SCCa9OYWlhJzkmE5ODfDYPaMsMSbmqpzzbM+qk=) 12: bKeksz2w4uplaCPFhGd2ZRXJ3L4.roa (hash: V3eyRTLr62Od4hxpOj09Jq4Nekd36hyzHMFde1nQKHM=) 13: cNrzpnZVR-vdGnfMmjiDxUQw38w.roa (hash: jDSBudPBssvuTBaPnXNJhRgSYVM03+9BoPvraHbjsUs=) 14: hOWBX1aqOOkBBDPmSf04HK0FDdQ.roa (hash: TNZ6xI5xHtE38+sW0p4MVYqN1AjK+nGsdspXM65hmqg=) 15: hpQK8Ct69QedB3MH-Zduh7fwfI0.roa (hash: tMKgnvO9EBwmVGsim8vR529voYsTaPvcU9t25lxh9c8=) 16: lE9bYROvMOgfAcJMOq1buSFu5Oc.roa (hash: uM/UbNoBafoN3u4NQaCJ1CV+W48Aj8GUgTcEvh/o4kw=) 17: r16T-QI1TOSAS0ywSc9osg92rrI.crl (hash: l+3wlv2QTsFzofW/ZlvtOmcNwVPhQnhauaM2F+w9PZg=) 18: sp2MMK9YRqm89c-c8Nk0zqZ0hl0.roa (hash: 4AR1dpezwOfRG52yq/YaU//Ei5bTQmeOkpGOb7/yTjo=) 19: xSn7ixxST4P6sLWhFGPF1kgNAlE.roa (hash: 6Zt2rctbn7D8+hho9smzj15xitIYg/ED9s7TTA4i/jk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/f4004b-d602-475d-931b-7e05ad0190ce/1/r16T-QI1TOSAS0ywSc9osg92rrI.crl rsync://rpki.ripe.net/repository/DEFAULT/42/f4004b-d602-475d-931b-7e05ad0190ce/1/r16T-QI1TOSAS0ywSc9osg92rrI.mft rsync://rpki.ripe.net/repository/DEFAULT/r16T-QI1TOSAS0ywSc9osg92rrI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 25 Sep 2026 14:17:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a0:d3:f0:0a:91:8e:d3:3b:22:9e:1e:8e:75:a5:e1:25:eb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=af5e93f902354ce4804b4cb049cf68b20f76aeb2 Validity Not Before: Sep 24 15:01:58 2026 GMT Not After : Sep 25 15:01:58 2026 GMT Subject: CN=111a7c15a107d5ffc5756d7063c7ed1739b74e02 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:66:90:f9:a9:0f:82:30:99:09:0a:fb:6a:ae: c1:d7:24:7f:80:12:c8:0c:8f:3e:96:68:d7:68:f2: aa:78:8b:60:c0:17:86:8b:33:66:6b:3b:27:a9:42: 6e:31:93:26:b3:73:38:59:e9:fe:37:04:33:3b:b6: f7:5e:7f:0c:db:74:92:da:dc:36:90:22:aa:a2:e0: 91:12:c9:e3:4b:99:29:09:7e:c0:2d:68:62:de:ea: 3d:9d:55:8c:5e:d3:ec:75:ea:ef:b0:38:9d:0c:3f: 40:cb:51:08:87:3e:f6:c8:ea:6d:9d:f9:61:ac:28: f1:49:80:1c:fb:53:66:03:a0:e3:e0:0d:7e:7c:a1: 33:e9:ac:75:e4:42:76:bb:1b:f8:c8:d1:bd:85:2e: 60:71:3b:98:2c:ce:5c:09:7a:2a:2e:cf:75:2e:5d: e7:20:9c:e3:90:f9:ab:5c:f7:2d:0b:e1:49:0d:1c: 7b:30:7c:4b:c3:63:89:a2:e5:a5:b2:9c:1c:29:ff: c6:b4:de:d4:f7:64:89:39:96:6c:20:72:41:de:5d: a7:b7:11:92:c5:ef:a5:a4:6a:8a:65:f9:e6:33:fa: 51:54:5e:10:bf:78:5f:a6:07:6b:3b:e1:92:d9:b5: f1:0f:d5:ff:42:f0:a2:98:d0:76:34:74:b9:62:10: 71:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:1A:7C:15:A1:07:D5:FF:C5:75:6D:70:63:C7:ED:17:39:B7:4E:02 X509v3 Authority Key Identifier: keyid:AF:5E:93:F9:02:35:4C:E4:80:4B:4C:B0:49:CF:68:B2:0F:76:AE:B2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r16T-QI1TOSAS0ywSc9osg92rrI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/f4004b-d602-475d-931b-7e05ad0190ce/1/r16T-QI1TOSAS0ywSc9osg92rrI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/42/f4004b-d602-475d-931b-7e05ad0190ce/1/r16T-QI1TOSAS0ywSc9osg92rrI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 38:91:03:49:b0:25:45:73:4c:31:d4:22:b9:56:ac:04:9b:47: 89:92:a7:5a:3b:b9:32:23:bd:62:67:ec:6a:c5:24:4d:92:4c: 5d:dd:04:27:1f:6a:a1:fd:ed:d7:86:c9:6c:73:82:3d:99:d0: f3:59:eb:96:de:eb:cb:3d:7f:55:19:47:73:cc:56:d1:7b:ab: 36:03:0e:e4:4b:24:2a:a8:80:5f:34:2a:e4:4d:82:7c:45:55: 45:ea:ab:af:08:b6:c5:0e:b2:34:80:30:00:70:a7:80:16:96: f6:62:5e:3c:2c:53:f2:f1:1c:48:d0:4e:82:da:9f:1d:bb:12: ff:51:e2:ab:fb:fb:5c:93:cd:d5:df:04:d8:d3:7c:7d:51:ea: c8:c6:e7:57:cd:09:18:53:59:9c:00:93:be:c7:ec:a3:56:66: 95:bf:9c:48:26:76:93:6b:5c:02:da:32:7c:8e:29:21:60:80: ba:4a:a7:20:9d:72:12:d2:6f:74:1a:30:9e:10:de:99:45:94: 73:8b:aa:86:e2:fa:8e:54:05:3c:ab:57:7c:83:77:01:69:a9: 55:9f:ff:3e:bd:d3:e8:19:0e:8b:3c:08:f3:6f:c2:53:28:58: 5b:5a:c3:49:f8:54:ef:2d:69:16:10:73:bc:32:5d:cf:e0:2b: ac:f0:d8:98 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaDT8AqRjtM7Ip4ejnWl4SXrMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFmNWU5M2Y5MDIzNTRjZTQ4MDRiNGNiMDQ5Y2Y2OGIyMGY3 NmFlYjIwHhcNMjYwOTI0MTUwMTU4WhcNMjYwOTI1MTUwMTU4WjAzMTEwLwYDVQQD EygxMTFhN2MxNWExMDdkNWZmYzU3NTZkNzA2M2M3ZWQxNzM5Yjc0ZTAyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAumaQ+akPgjCZCQr7aq7B1yR/gBLI DI8+lmjXaPKqeItgwBeGizNmazsnqUJuMZMms3M4Wen+NwQzO7b3Xn8M23SS2tw2 kCKqouCREsnjS5kpCX7ALWhi3uo9nVWMXtPsdervsDidDD9Ay1EIhz72yOptnflh rCjxSYAc+1NmA6Dj4A1+fKEz6ax15EJ2uxv4yNG9hS5gcTuYLM5cCXoqLs91Ll3n IJzjkPmrXPctC+FJDRx7MHxLw2OJouWlspwcKf/GtN7U92SJOZZsIHJB3l2ntxGS xe+lpGqKZfnmM/pRVF4Qv3hfpgdrO+GS2bXxD9X/QvCimNB2NHS5YhBxLQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBEafBWhB9X/xXVtcGPH7Rc5t04CMB8GA1UdIwQY MBaAFK9ek/kCNUzkgEtMsEnPaLIPdq6yMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcjE2VC1RSTFUT1NBUzB5d1NjOW9zZzkycnJJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Mi9mNDAwNGItZDYwMi00NzVkLTkzMWIt N2UwNWFkMDE5MGNlLzEvcjE2VC1RSTFUT1NBUzB5d1NjOW9zZzkycnJJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Mi9mNDAwNGItZDYwMi00NzVkLTkzMWItN2UwNWFkMDE5MGNl LzEvcjE2VC1RSTFUT1NBUzB5d1NjOW9zZzkycnJJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOJEDSbAl RXNMMdQiuVasBJtHiZKnWju5MiO9YmfsasUkTZJMXd0EJx9qof3t14bJbHOCPZnQ 81nrlt7ryz1/VRlHc8xW0XurNgMO5EskKqiAXzQq5E2CfEVVReqrrwi2xQ6yNIAw AHCngBaW9mJePCxT8vEcSNBOgtqfHbsS/1Hiq/v7XJPN1d8E2NN8fVHqyMbnV80J GFNZnACTvsfso1Zmlb+cSCZ2k2tcAtoyfI4pIWCAukqnIJ1yEtJvdBownhDemUWU c4uqhuL6jlQFPKtXfIN3AWmpVZ//Pr3T6BkOizwI82/CUyhYW1rDSfhU7y1pFhBz vDJdz+ArrPDYmA== -----END CERTIFICATE-----Generated at Thu Sep 24 21:00:39 2026 by rpki-client