
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/f4004b-d602-475d-931b-7e05ad0190ce/1/r16T-QI1TOSAS0ywSc9osg92rrI.mft
File: r16T-QI1TOSAS0ywSc9osg92rrI.mft (raw, json)
Hash identifier: 5T/hnnD23B6ZhADkB+qbyFw7IVliJd6Yne1cwO/mfHA=
Subject key identifier: F2:7E:BB:D5:FE:2E:C8:91:11:25:80:23:97:B4:3A:C9:A9:B6:05:CD
Authority key identifier: AF:5E:93:F9:02:35:4C:E4:80:4B:4C:B0:49:CF:68:B2:0F:76:AE:B2
Certificate issuer: /CN=af5e93f902354ce4804b4cb049cf68b20f76aeb2
Certificate serial: 019F8F7F240D8988FB25E3225995EB337EF6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r16T-QI1TOSAS0ywSc9osg92rrI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/f4004b-d602-475d-931b-7e05ad0190ce/1/r16T-QI1TOSAS0ywSc9osg92rrI.mft
Manifest number: 1658
Signing time: Thu 23 Jul 2026 15:01:41 +0000
Manifest this update: Thu 23 Jul 2026 15:01:41 +0000
Manifest next update: Fri 24 Jul 2026 15:01:41 +0000
Files and hashes: 1: 76SUa31tX84MMYV-5pJtl_RzfBs.roa (hash: VLwC/xTHEJsdM4oEbJXYgc2X6KgnqYrx1To2cyFfsks=)
2: EQyiKX_7-Wpxq09KJocOiD7iVtg.roa (hash: xSHc+sset4mHHx5Au4SFQGD7gPC3y5Gef/MK9s8Iy4Y=)
3: IqvcRngzlVCtX_OA-70dAZLFdA8.roa (hash: aY3f5nvXyrfMF4R4lR/AbKv7PaJsmbQ5UoA1+i35Mzo=)
4: J6RUNAmoogv7zgMLcCOwk_cTSbw.roa (hash: g+8OdmE2eYFbsqzauS740Ewhw4IU7T/U1OEITUeBDc4=)
5: JYSE_79beIVH7AyGREwVYhRCyTY.roa (hash: l3baob39qaOOP1HD2nUjVfG8gYEyw7b1MgZubnhYeyE=)
6: LlTZm9TRn88VWou6DKeJrZdQgvU.roa (hash: GTQExs7+EOPrcDE70ZQ1HXMC0yUw4J5W6WVSW6HNDyE=)
7: O-CoG-YF7L6hwLeg3uly4Kp8B_8.roa (hash: 5oJU3WpHWPREk+VpJtji8wlNog6GMZ8hQeRSHT6lLd0=)
8: U2Yc5skQvePijZYsWlFophc_BK4.roa (hash: gMfZmKyaceaZgToU/WPMcQ0QQiGVzdWPQc5qXxtNrpw=)
9: WMiYfXfaecilSx0Cw11AX6GHoD0.roa (hash: tfANuqYEsqBC9djOQlOpVgZbpkAcWNv/SHctNZh0ths=)
10: YLu7TqT2RSl1_BNUUxUt12edQaA.roa (hash: paF/KBHEk0JOZSKhbJ4oeNoOGAfMADsXOpIZVHL7RNY=)
11: aQ88EoiiajhYjpR8X9YSC2Itufk.roa (hash: 6ocE7SCCa9OYWlhJzkmE5ODfDYPaMsMSbmqpzzbM+qk=)
12: bKeksz2w4uplaCPFhGd2ZRXJ3L4.roa (hash: V3eyRTLr62Od4hxpOj09Jq4Nekd36hyzHMFde1nQKHM=)
13: cNrzpnZVR-vdGnfMmjiDxUQw38w.roa (hash: jDSBudPBssvuTBaPnXNJhRgSYVM03+9BoPvraHbjsUs=)
14: hOWBX1aqOOkBBDPmSf04HK0FDdQ.roa (hash: TNZ6xI5xHtE38+sW0p4MVYqN1AjK+nGsdspXM65hmqg=)
15: hpQK8Ct69QedB3MH-Zduh7fwfI0.roa (hash: tMKgnvO9EBwmVGsim8vR529voYsTaPvcU9t25lxh9c8=)
16: lE9bYROvMOgfAcJMOq1buSFu5Oc.roa (hash: uM/UbNoBafoN3u4NQaCJ1CV+W48Aj8GUgTcEvh/o4kw=)
17: r16T-QI1TOSAS0ywSc9osg92rrI.crl (hash: TT2mOwAuo17LG8OCBvnwMNHNWhWiVbCFTrO7VyLBzG8=)
18: sp2MMK9YRqm89c-c8Nk0zqZ0hl0.roa (hash: 4AR1dpezwOfRG52yq/YaU//Ei5bTQmeOkpGOb7/yTjo=)
19: xSn7ixxST4P6sLWhFGPF1kgNAlE.roa (hash: 6Zt2rctbn7D8+hho9smzj15xitIYg/ED9s7TTA4i/jk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/f4004b-d602-475d-931b-7e05ad0190ce/1/r16T-QI1TOSAS0ywSc9osg92rrI.crl
rsync://rpki.ripe.net/repository/DEFAULT/42/f4004b-d602-475d-931b-7e05ad0190ce/1/r16T-QI1TOSAS0ywSc9osg92rrI.mft
rsync://rpki.ripe.net/repository/DEFAULT/r16T-QI1TOSAS0ywSc9osg92rrI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8f:7f:24:0d:89:88:fb:25:e3:22:59:95:eb:33:7e:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=af5e93f902354ce4804b4cb049cf68b20f76aeb2
Validity
Not Before: Jul 23 15:01:41 2026 GMT
Not After : Jul 24 15:01:41 2026 GMT
Subject: CN=f27ebbd5fe2ec8911125802397b43ac9a9b605cd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:21:5a:4b:54:60:61:bc:a6:a4:b8:1d:3c:36:
c6:39:1e:26:50:35:23:aa:43:0f:20:dd:26:59:09:
bc:f0:37:b6:84:bd:5e:70:45:f6:33:cd:f9:a3:40:
de:4d:05:bf:2e:98:b9:be:fb:5e:f0:c4:03:bc:5f:
99:a0:5c:86:3c:47:d6:9c:e9:64:5c:e3:14:e6:70:
9e:8e:4e:2b:43:a4:1a:2a:48:36:48:0f:6f:6e:0a:
1e:38:5d:b4:6d:aa:8b:c3:aa:ec:c4:8a:0e:d8:52:
f3:03:7c:53:e1:d4:a0:06:2f:d5:bb:1b:09:23:b5:
fa:d6:6a:05:84:22:4f:d2:0f:4f:9f:0e:bd:02:c0:
94:8e:21:bc:4f:95:e7:e1:70:fd:9e:94:95:b5:47:
e9:57:a0:9b:73:41:ed:6c:b4:e3:01:5f:8a:9f:ad:
ee:1c:a2:47:d6:f6:61:39:bb:50:2e:a6:a3:24:9a:
e4:da:2a:47:99:5b:a7:7d:e0:13:e9:64:56:27:d4:
f9:2f:43:6f:be:ec:58:07:95:27:ef:74:5c:48:02:
9d:ee:64:a8:6e:90:a9:9a:63:56:4f:f4:91:0c:f7:
4c:a1:cd:11:c2:e8:d8:1b:2c:af:05:46:d9:d3:0a:
2d:50:af:9f:9b:69:8a:50:9a:21:86:5d:33:94:82:
17:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:7E:BB:D5:FE:2E:C8:91:11:25:80:23:97:B4:3A:C9:A9:B6:05:CD
X509v3 Authority Key Identifier:
keyid:AF:5E:93:F9:02:35:4C:E4:80:4B:4C:B0:49:CF:68:B2:0F:76:AE:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r16T-QI1TOSAS0ywSc9osg92rrI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/f4004b-d602-475d-931b-7e05ad0190ce/1/r16T-QI1TOSAS0ywSc9osg92rrI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/f4004b-d602-475d-931b-7e05ad0190ce/1/r16T-QI1TOSAS0ywSc9osg92rrI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:a0:1c:86:31:06:09:c2:66:21:8f:c5:4f:76:50:0e:74:f3:
38:79:23:b1:a3:61:7b:af:8b:3a:bf:df:3d:ab:b3:b2:22:70:
fc:a7:5d:3b:fe:50:cc:5e:52:a1:35:64:04:63:5d:11:65:69:
5f:3b:19:9f:34:28:35:9f:e8:63:98:ff:d0:b2:17:d4:1b:6c:
44:ea:54:72:b3:63:3b:1b:5e:fb:cd:ea:28:e8:ce:7f:c0:b2:
0c:ce:ad:39:5b:25:cf:f6:47:b4:14:87:64:67:0c:39:49:31:
ff:af:12:7b:70:f8:75:9a:7f:1e:00:85:e0:b0:dc:91:26:b8:
01:48:8f:c9:3c:fa:58:7d:8f:cd:9f:4a:29:e4:a9:9e:73:02:
c7:80:2e:bc:24:56:aa:b1:6a:48:d3:14:f4:cc:4b:e6:6a:63:
c8:67:c4:93:c3:ee:45:e4:7c:4a:dc:5b:a6:d0:f9:47:59:b4:
81:c6:d4:22:9d:8a:52:d8:ba:39:a1:91:8a:13:47:ba:89:7a:
10:cd:31:34:1c:ee:5a:4f:14:3c:e4:e9:64:1f:d4:18:83:c9:
97:84:35:b0:a2:c7:98:3b:b8:37:49:36:eb:ce:0a:d3:7c:b4:
99:4d:87:50:64:07:09:01:a7:e2:a5:b0:ab:9a:02:4f:ba:dd:
58:a9:a6:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 21:37:09 2026 by rpki-client