$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/f4004b-d602-475d-931b-7e05ad0190ce/1/r16T-QI1TOSAS0ywSc9osg92rrI.mft File: r16T-QI1TOSAS0ywSc9osg92rrI.mft (raw, json) Hash identifier: bTqANE3tSh3rrOP3ZiVxN/ibz3uG6lMNOS8AZkKOtoc= Subject key identifier: E7:6B:66:A9:34:41:41:93:3D:26:4A:89:59:E0:EB:98:86:D0:DD:B2 Authority key identifier: AF:5E:93:F9:02:35:4C:E4:80:4B:4C:B0:49:CF:68:B2:0F:76:AE:B2 Certificate issuer: /CN=af5e93f902354ce4804b4cb049cf68b20f76aeb2 Certificate serial: 019DC9AA2045C137A48EACD5BAD9987758C1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r16T-QI1TOSAS0ywSc9osg92rrI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/f4004b-d602-475d-931b-7e05ad0190ce/1/r16T-QI1TOSAS0ywSc9osg92rrI.mft Manifest number: 156D Signing time: Sun 26 Apr 2026 12:01:02 +0000 Manifest this update: Sun 26 Apr 2026 12:01:02 +0000 Manifest next update: Mon 27 Apr 2026 12:01:02 +0000 Files and hashes: 1: 76SUa31tX84MMYV-5pJtl_RzfBs.roa (hash: VLwC/xTHEJsdM4oEbJXYgc2X6KgnqYrx1To2cyFfsks=) 2: EQyiKX_7-Wpxq09KJocOiD7iVtg.roa (hash: xSHc+sset4mHHx5Au4SFQGD7gPC3y5Gef/MK9s8Iy4Y=) 3: IqvcRngzlVCtX_OA-70dAZLFdA8.roa (hash: aY3f5nvXyrfMF4R4lR/AbKv7PaJsmbQ5UoA1+i35Mzo=) 4: J6RUNAmoogv7zgMLcCOwk_cTSbw.roa (hash: g+8OdmE2eYFbsqzauS740Ewhw4IU7T/U1OEITUeBDc4=) 5: JYSE_79beIVH7AyGREwVYhRCyTY.roa (hash: l3baob39qaOOP1HD2nUjVfG8gYEyw7b1MgZubnhYeyE=) 6: LlTZm9TRn88VWou6DKeJrZdQgvU.roa (hash: GTQExs7+EOPrcDE70ZQ1HXMC0yUw4J5W6WVSW6HNDyE=) 7: O-CoG-YF7L6hwLeg3uly4Kp8B_8.roa (hash: 5oJU3WpHWPREk+VpJtji8wlNog6GMZ8hQeRSHT6lLd0=) 8: U2Yc5skQvePijZYsWlFophc_BK4.roa (hash: gMfZmKyaceaZgToU/WPMcQ0QQiGVzdWPQc5qXxtNrpw=) 9: WMiYfXfaecilSx0Cw11AX6GHoD0.roa (hash: tfANuqYEsqBC9djOQlOpVgZbpkAcWNv/SHctNZh0ths=) 10: YLu7TqT2RSl1_BNUUxUt12edQaA.roa (hash: paF/KBHEk0JOZSKhbJ4oeNoOGAfMADsXOpIZVHL7RNY=) 11: aQ88EoiiajhYjpR8X9YSC2Itufk.roa (hash: 6ocE7SCCa9OYWlhJzkmE5ODfDYPaMsMSbmqpzzbM+qk=) 12: bKeksz2w4uplaCPFhGd2ZRXJ3L4.roa (hash: V3eyRTLr62Od4hxpOj09Jq4Nekd36hyzHMFde1nQKHM=) 13: cNrzpnZVR-vdGnfMmjiDxUQw38w.roa (hash: jDSBudPBssvuTBaPnXNJhRgSYVM03+9BoPvraHbjsUs=) 14: hOWBX1aqOOkBBDPmSf04HK0FDdQ.roa (hash: TNZ6xI5xHtE38+sW0p4MVYqN1AjK+nGsdspXM65hmqg=) 15: hpQK8Ct69QedB3MH-Zduh7fwfI0.roa (hash: tMKgnvO9EBwmVGsim8vR529voYsTaPvcU9t25lxh9c8=) 16: lE9bYROvMOgfAcJMOq1buSFu5Oc.roa (hash: uM/UbNoBafoN3u4NQaCJ1CV+W48Aj8GUgTcEvh/o4kw=) 17: r16T-QI1TOSAS0ywSc9osg92rrI.crl (hash: lyyNCDLYJS7furkEROyNjpcTk3dMpqYWoa0INM6Qr5w=) 18: sp2MMK9YRqm89c-c8Nk0zqZ0hl0.roa (hash: 4AR1dpezwOfRG52yq/YaU//Ei5bTQmeOkpGOb7/yTjo=) 19: xSn7ixxST4P6sLWhFGPF1kgNAlE.roa (hash: 6Zt2rctbn7D8+hho9smzj15xitIYg/ED9s7TTA4i/jk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/f4004b-d602-475d-931b-7e05ad0190ce/1/r16T-QI1TOSAS0ywSc9osg92rrI.crl rsync://rpki.ripe.net/repository/DEFAULT/42/f4004b-d602-475d-931b-7e05ad0190ce/1/r16T-QI1TOSAS0ywSc9osg92rrI.mft rsync://rpki.ripe.net/repository/DEFAULT/r16T-QI1TOSAS0ywSc9osg92rrI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 27 Apr 2026 12:01:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9d:c9:aa:20:45:c1:37:a4:8e:ac:d5:ba:d9:98:77:58:c1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=af5e93f902354ce4804b4cb049cf68b20f76aeb2 Validity Not Before: Apr 26 12:01:02 2026 GMT Not After : Apr 27 12:01:02 2026 GMT Subject: CN=e76b66a9344141933d264a8959e0eb9886d0ddb2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:ef:47:7d:c1:81:85:86:d2:5b:45:1a:76:31: b3:27:81:18:18:c3:54:b6:c1:52:8d:70:4e:38:df: b2:84:2b:43:5c:68:95:9b:26:cf:b9:f2:25:d3:9b: 84:67:76:4d:d1:f2:e7:ff:dc:24:77:d8:2a:0b:5d: b9:65:04:d4:b9:dc:19:2b:7e:c9:d8:8b:c6:bd:3a: f7:39:a1:8e:e3:fa:5e:ea:3c:7a:6f:38:f7:d9:54: 30:1f:eb:89:b9:a8:57:c3:7f:87:ea:e1:4f:9b:08: 38:ba:74:57:9c:b3:f0:7f:1f:2e:ff:b5:ed:8c:16: 72:7f:0a:bf:48:33:a1:b9:d4:32:9a:28:c3:7b:fa: 68:ba:32:80:e5:70:0d:c5:e0:5c:49:22:43:42:62: 3a:86:71:7a:60:90:3a:ca:0d:63:63:50:09:50:cc: 73:7b:b6:00:82:46:6f:01:5f:3f:7d:5e:e3:cb:1f: e5:1b:a3:fa:fa:6a:c1:37:4e:7a:b0:72:26:64:59: 08:66:54:91:f4:0b:6c:c2:ee:09:1f:da:25:e3:f4: 7a:11:bf:89:fc:71:b4:68:43:50:b7:ca:a6:27:ee: d9:2a:74:5e:d5:76:55:13:c0:20:f8:25:b5:76:a7: a9:f3:21:bb:e7:01:3f:d5:79:bb:69:b8:7f:16:ad: 73:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:6B:66:A9:34:41:41:93:3D:26:4A:89:59:E0:EB:98:86:D0:DD:B2 X509v3 Authority Key Identifier: keyid:AF:5E:93:F9:02:35:4C:E4:80:4B:4C:B0:49:CF:68:B2:0F:76:AE:B2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r16T-QI1TOSAS0ywSc9osg92rrI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/f4004b-d602-475d-931b-7e05ad0190ce/1/r16T-QI1TOSAS0ywSc9osg92rrI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/42/f4004b-d602-475d-931b-7e05ad0190ce/1/r16T-QI1TOSAS0ywSc9osg92rrI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 01:3c:25:ba:73:05:fd:ce:63:60:24:27:63:bf:3b:0c:bd:0d: 33:4e:14:9f:92:ab:07:88:bf:01:c6:03:ee:84:37:73:c9:d4: c9:46:f7:85:80:6f:06:11:9e:5a:37:9b:f2:30:21:7f:38:23: f7:8c:4c:8d:8d:fd:7f:cc:ad:01:02:bd:bf:36:85:af:37:fc: 93:29:23:77:a7:9f:ef:cb:83:3b:28:b5:c6:91:bb:8e:d4:01: 6a:bb:70:28:21:9b:42:4f:7f:37:89:f7:d0:04:02:86:42:d5: 16:57:c3:d2:98:1f:a3:66:f9:fd:2b:45:5c:86:d4:49:4b:7e: 8f:3d:90:a8:30:1c:35:f5:9b:1b:8e:ca:7a:83:dd:42:82:66: db:a8:9b:50:59:96:e6:fd:13:aa:1e:cd:ac:a6:58:be:83:89: 98:d1:07:55:b1:23:cd:e3:05:c0:36:d4:46:20:2b:66:25:9c: 3c:af:59:45:c3:9a:03:f7:af:89:4b:32:94:42:be:9b:a4:95: 0d:93:33:ad:5b:31:bf:5c:6f:7c:aa:e1:f8:04:05:3c:79:f7: 2e:a5:4a:4c:8f:b4:50:31:47:54:8d:60:98:6f:3d:4a:0e:0a: 13:b6:99:4e:17:da:2e:51:2f:df:7d:ef:d2:57:55:ad:b9:dc: a2:64:57:85 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ3JqiBFwTekjqzVutmYd1jBMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFmNWU5M2Y5MDIzNTRjZTQ4MDRiNGNiMDQ5Y2Y2OGIyMGY3 NmFlYjIwHhcNMjYwNDI2MTIwMTAyWhcNMjYwNDI3MTIwMTAyWjAzMTEwLwYDVQQD EyhlNzZiNjZhOTM0NDE0MTkzM2QyNjRhODk1OWUwZWI5ODg2ZDBkZGIyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv+9HfcGBhYbSW0UadjGzJ4EYGMNU tsFSjXBOON+yhCtDXGiVmybPufIl05uEZ3ZN0fLn/9wkd9gqC125ZQTUudwZK37J 2IvGvTr3OaGO4/pe6jx6bzj32VQwH+uJuahXw3+H6uFPmwg4unRXnLPwfx8u/7Xt jBZyfwq/SDOhudQymijDe/poujKA5XANxeBcSSJDQmI6hnF6YJA6yg1jY1AJUMxz e7YAgkZvAV8/fV7jyx/lG6P6+mrBN056sHImZFkIZlSR9Atswu4JH9ol4/R6Eb+J /HG0aENQt8qmJ+7ZKnRe1XZVE8Ag+CW1dqep8yG75wE/1Xm7abh/Fq1z2wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOdrZqk0QUGTPSZKiVng65iG0N2yMB8GA1UdIwQY MBaAFK9ek/kCNUzkgEtMsEnPaLIPdq6yMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcjE2VC1RSTFUT1NBUzB5d1NjOW9zZzkycnJJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Mi9mNDAwNGItZDYwMi00NzVkLTkzMWIt N2UwNWFkMDE5MGNlLzEvcjE2VC1RSTFUT1NBUzB5d1NjOW9zZzkycnJJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Mi9mNDAwNGItZDYwMi00NzVkLTkzMWItN2UwNWFkMDE5MGNl LzEvcjE2VC1RSTFUT1NBUzB5d1NjOW9zZzkycnJJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAATwlunMF /c5jYCQnY787DL0NM04Un5KrB4i/AcYD7oQ3c8nUyUb3hYBvBhGeWjeb8jAhfzgj 94xMjY39f8ytAQK9vzaFrzf8kykjd6ef78uDOyi1xpG7jtQBartwKCGbQk9/N4n3 0AQChkLVFlfD0pgfo2b5/StFXIbUSUt+jz2QqDAcNfWbG47KeoPdQoJm26ibUFmW 5v0Tqh7NrKZYvoOJmNEHVbEjzeMFwDbURiArZiWcPK9ZRcOaA/eviUsylEK+m6SV DZMzrVsxv1xvfKrh+AQFPHn3LqVKTI+0UDFHVI1gmG89Sg4KE7aZThfaLlEv333v 0ldVrbncomRXhQ== -----END CERTIFICATE-----Generated at Sun Apr 26 22:50:40 2026 by rpki-client