$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/f4004b-d602-475d-931b-7e05ad0190ce/1/r16T-QI1TOSAS0ywSc9osg92rrI.mft File: r16T-QI1TOSAS0ywSc9osg92rrI.mft (raw, json) Hash identifier: hhLV3atlRGESY1qbGqb4xJiYelmSxl0scM5XUTkyDCg= Subject key identifier: A4:A2:DE:F5:6A:4E:43:E1:9F:AA:6A:3C:BC:F5:63:89:C0:37:04:18 Authority key identifier: AF:5E:93:F9:02:35:4C:E4:80:4B:4C:B0:49:CF:68:B2:0F:76:AE:B2 Certificate issuer: /CN=af5e93f902354ce4804b4cb049cf68b20f76aeb2 Certificate serial: 019CE147750C2DE6C4FCA57FBD520BCD6BCF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r16T-QI1TOSAS0ywSc9osg92rrI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/f4004b-d602-475d-931b-7e05ad0190ce/1/r16T-QI1TOSAS0ywSc9osg92rrI.mft Manifest number: 14F4 Signing time: Thu 12 Mar 2026 09:01:22 +0000 Manifest this update: Thu 12 Mar 2026 09:01:22 +0000 Manifest next update: Fri 13 Mar 2026 09:01:22 +0000 Files and hashes: 1: 76SUa31tX84MMYV-5pJtl_RzfBs.roa (hash: VLwC/xTHEJsdM4oEbJXYgc2X6KgnqYrx1To2cyFfsks=) 2: EQyiKX_7-Wpxq09KJocOiD7iVtg.roa (hash: xSHc+sset4mHHx5Au4SFQGD7gPC3y5Gef/MK9s8Iy4Y=) 3: FG7fyzZuohN306xSsK2XuW27vQs.roa (hash: 0zLeebnMKiKD7HfopOFiSG1fn+u6PLVB7uvswIo31qc=) 4: IqvcRngzlVCtX_OA-70dAZLFdA8.roa (hash: aY3f5nvXyrfMF4R4lR/AbKv7PaJsmbQ5UoA1+i35Mzo=) 5: J6RUNAmoogv7zgMLcCOwk_cTSbw.roa (hash: g+8OdmE2eYFbsqzauS740Ewhw4IU7T/U1OEITUeBDc4=) 6: JYSE_79beIVH7AyGREwVYhRCyTY.roa (hash: l3baob39qaOOP1HD2nUjVfG8gYEyw7b1MgZubnhYeyE=) 7: LlTZm9TRn88VWou6DKeJrZdQgvU.roa (hash: GTQExs7+EOPrcDE70ZQ1HXMC0yUw4J5W6WVSW6HNDyE=) 8: O-CoG-YF7L6hwLeg3uly4Kp8B_8.roa (hash: 5oJU3WpHWPREk+VpJtji8wlNog6GMZ8hQeRSHT6lLd0=) 9: U2Yc5skQvePijZYsWlFophc_BK4.roa (hash: gMfZmKyaceaZgToU/WPMcQ0QQiGVzdWPQc5qXxtNrpw=) 10: WMiYfXfaecilSx0Cw11AX6GHoD0.roa (hash: tfANuqYEsqBC9djOQlOpVgZbpkAcWNv/SHctNZh0ths=) 11: YLu7TqT2RSl1_BNUUxUt12edQaA.roa (hash: paF/KBHEk0JOZSKhbJ4oeNoOGAfMADsXOpIZVHL7RNY=) 12: aQ88EoiiajhYjpR8X9YSC2Itufk.roa (hash: 6ocE7SCCa9OYWlhJzkmE5ODfDYPaMsMSbmqpzzbM+qk=) 13: bKeksz2w4uplaCPFhGd2ZRXJ3L4.roa (hash: V3eyRTLr62Od4hxpOj09Jq4Nekd36hyzHMFde1nQKHM=) 14: cNrzpnZVR-vdGnfMmjiDxUQw38w.roa (hash: jDSBudPBssvuTBaPnXNJhRgSYVM03+9BoPvraHbjsUs=) 15: hOWBX1aqOOkBBDPmSf04HK0FDdQ.roa (hash: TNZ6xI5xHtE38+sW0p4MVYqN1AjK+nGsdspXM65hmqg=) 16: hpQK8Ct69QedB3MH-Zduh7fwfI0.roa (hash: tMKgnvO9EBwmVGsim8vR529voYsTaPvcU9t25lxh9c8=) 17: lE9bYROvMOgfAcJMOq1buSFu5Oc.roa (hash: uM/UbNoBafoN3u4NQaCJ1CV+W48Aj8GUgTcEvh/o4kw=) 18: r16T-QI1TOSAS0ywSc9osg92rrI.crl (hash: 9sLaIjzOuuxrxaYtdI7SbAdGZwFTn1JfO0nxwzwaF6A=) 19: sp2MMK9YRqm89c-c8Nk0zqZ0hl0.roa (hash: 4AR1dpezwOfRG52yq/YaU//Ei5bTQmeOkpGOb7/yTjo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/f4004b-d602-475d-931b-7e05ad0190ce/1/r16T-QI1TOSAS0ywSc9osg92rrI.crl rsync://rpki.ripe.net/repository/DEFAULT/42/f4004b-d602-475d-931b-7e05ad0190ce/1/r16T-QI1TOSAS0ywSc9osg92rrI.mft rsync://rpki.ripe.net/repository/DEFAULT/r16T-QI1TOSAS0ywSc9osg92rrI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 13 Mar 2026 09:01:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:e1:47:75:0c:2d:e6:c4:fc:a5:7f:bd:52:0b:cd:6b:cf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=af5e93f902354ce4804b4cb049cf68b20f76aeb2 Validity Not Before: Mar 12 09:01:22 2026 GMT Not After : Mar 13 09:01:22 2026 GMT Subject: CN=a4a2def56a4e43e19faa6a3cbcf56389c0370418 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:0e:1a:05:6e:b2:05:77:bb:5c:eb:b5:05:9c: 66:81:26:93:85:38:47:a3:12:09:fc:a2:2c:c3:bd: ef:d1:67:2c:fa:03:c7:64:cc:c2:6a:81:f4:e0:fb: a0:3a:21:d6:01:85:c3:7b:86:03:62:93:91:8d:21: 34:c2:04:19:91:20:a9:13:4c:dc:e7:14:72:b1:c1: 81:08:bb:da:d1:36:15:3e:5c:8f:ac:f9:b9:5b:73: 0e:c2:c3:9e:9a:8a:98:7d:23:c0:74:2e:ae:3f:aa: 31:11:02:ab:76:30:e3:58:58:16:18:11:ee:14:16: c7:8e:01:90:0a:82:32:16:7b:e2:4a:5a:64:4a:49: a9:aa:81:7f:6e:37:d8:7c:af:48:0f:3a:c8:16:eb: a8:4e:91:ba:e5:02:54:a6:e6:ee:62:8e:44:f5:ca: 57:15:ca:bd:e3:c4:ed:0b:1a:df:90:f6:b0:df:74: ce:69:ac:a7:81:76:8a:28:c2:60:44:77:14:99:1a: d5:c1:c2:e4:f8:d4:74:ce:80:e1:ca:14:27:d7:dd: 65:ef:eb:20:77:53:61:27:22:b5:11:89:c0:f5:0e: 06:ef:da:a1:64:23:73:52:9f:f6:e7:de:62:ef:e7: 11:02:53:7e:85:72:54:ac:8e:8f:b9:80:1b:49:13: e7:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:A2:DE:F5:6A:4E:43:E1:9F:AA:6A:3C:BC:F5:63:89:C0:37:04:18 X509v3 Authority Key Identifier: keyid:AF:5E:93:F9:02:35:4C:E4:80:4B:4C:B0:49:CF:68:B2:0F:76:AE:B2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r16T-QI1TOSAS0ywSc9osg92rrI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/f4004b-d602-475d-931b-7e05ad0190ce/1/r16T-QI1TOSAS0ywSc9osg92rrI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/42/f4004b-d602-475d-931b-7e05ad0190ce/1/r16T-QI1TOSAS0ywSc9osg92rrI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4a:21:e5:6b:9c:ca:4c:9c:63:51:3a:5a:2f:d9:9e:30:45:fb: 22:4f:ed:e9:a6:49:2c:01:b5:a3:2b:69:d5:5a:92:7f:a5:e6: 7c:49:b0:62:d9:83:44:f6:5a:e5:9a:5f:d0:55:f2:f1:33:d2: 97:9d:38:af:40:97:e0:63:65:31:bb:fb:ea:f3:68:7a:e0:e9: ac:aa:8c:f6:21:a8:8b:49:1c:c9:8e:b3:16:7f:53:60:d5:24: 7b:9d:41:e1:34:15:32:df:e0:a4:ee:34:0a:6a:8a:7c:79:35: ed:b5:32:d9:c3:82:16:9b:51:d7:01:d4:2c:22:89:b9:6c:40: fd:d6:ca:73:76:11:96:4a:0a:28:ff:a6:d9:a2:34:7c:ad:c1: 67:c1:e0:92:e7:05:cb:fb:6a:ab:cf:ee:3d:8a:d0:a1:3d:3d: 56:e8:49:a4:b4:ac:c6:2f:1b:d3:8d:3f:d1:0f:fc:b6:cc:2f: 66:96:f1:cf:64:be:82:aa:31:47:8f:cc:d7:69:2e:f9:27:13: 80:d7:76:d3:53:75:67:19:9c:7f:b4:e1:44:23:8a:0e:a8:71: 90:95:e7:d5:b9:a5:20:45:e0:65:41:f7:7c:a6:8f:36:58:aa: 29:0e:ca:1d:68:99:be:4f:6d:05:32:e5:ec:ed:01:db:2e:12: d5:0e:f0:04 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZzhR3UMLebE/KV/vVILzWvPMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFmNWU5M2Y5MDIzNTRjZTQ4MDRiNGNiMDQ5Y2Y2OGIyMGY3 NmFlYjIwHhcNMjYwMzEyMDkwMTIyWhcNMjYwMzEzMDkwMTIyWjAzMTEwLwYDVQQD EyhhNGEyZGVmNTZhNGU0M2UxOWZhYTZhM2NiY2Y1NjM4OWMwMzcwNDE4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwQ4aBW6yBXe7XOu1BZxmgSaThThH oxIJ/KIsw73v0Wcs+gPHZMzCaoH04PugOiHWAYXDe4YDYpORjSE0wgQZkSCpE0zc 5xRyscGBCLva0TYVPlyPrPm5W3MOwsOemoqYfSPAdC6uP6oxEQKrdjDjWFgWGBHu FBbHjgGQCoIyFnviSlpkSkmpqoF/bjfYfK9IDzrIFuuoTpG65QJUpubuYo5E9cpX Fcq948TtCxrfkPaw33TOaayngXaKKMJgRHcUmRrVwcLk+NR0zoDhyhQn191l7+sg d1NhJyK1EYnA9Q4G79qhZCNzUp/2595i7+cRAlN+hXJUrI6PuYAbSRPn4QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKSi3vVqTkPhn6pqPLz1Y4nANwQYMB8GA1UdIwQY MBaAFK9ek/kCNUzkgEtMsEnPaLIPdq6yMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcjE2VC1RSTFUT1NBUzB5d1NjOW9zZzkycnJJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Mi9mNDAwNGItZDYwMi00NzVkLTkzMWIt N2UwNWFkMDE5MGNlLzEvcjE2VC1RSTFUT1NBUzB5d1NjOW9zZzkycnJJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Mi9mNDAwNGItZDYwMi00NzVkLTkzMWItN2UwNWFkMDE5MGNl LzEvcjE2VC1RSTFUT1NBUzB5d1NjOW9zZzkycnJJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASiHla5zK TJxjUTpaL9meMEX7Ik/t6aZJLAG1oytp1VqSf6XmfEmwYtmDRPZa5Zpf0FXy8TPS l504r0CX4GNlMbv76vNoeuDprKqM9iGoi0kcyY6zFn9TYNUke51B4TQVMt/gpO40 CmqKfHk17bUy2cOCFptR1wHULCKJuWxA/dbKc3YRlkoKKP+m2aI0fK3BZ8HgkucF y/tqq8/uPYrQoT09VuhJpLSsxi8b040/0Q/8tswvZpbxz2S+gqoxR4/M12ku+ScT gNd201N1Zxmcf7ThRCOKDqhxkJXn1bmlIEXgZUH3fKaPNliqKQ7KHWiZvk9tBTLl 7O0B2y4S1Q7wBA== -----END CERTIFICATE-----Generated at Thu Mar 12 17:09:32 2026 by rpki-client