$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/42/f4004b-d602-475d-931b-7e05ad0190ce/1/r16T-QI1TOSAS0ywSc9osg92rrI.mft File: r16T-QI1TOSAS0ywSc9osg92rrI.mft (raw, json) Hash identifier: beJJaF1FttatFiSi8cl493qEd+wpXdlkE9pvQ4BGJtQ= Subject key identifier: F1:29:2B:EE:76:12:DC:FE:BA:DD:42:2E:01:F7:B8:7E:71:68:4B:2E Authority key identifier: AF:5E:93:F9:02:35:4C:E4:80:4B:4C:B0:49:CF:68:B2:0F:76:AE:B2 Certificate issuer: /CN=af5e93f902354ce4804b4cb049cf68b20f76aeb2 Certificate serial: 01A17627F29D9914ACD96933D64E86150AD8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r16T-QI1TOSAS0ywSc9osg92rrI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/f4004b-d602-475d-931b-7e05ad0190ce/1/r16T-QI1TOSAS0ywSc9osg92rrI.mft Manifest number: 1754 Signing time: Mon 26 Oct 2026 03:01:31 +0000 Manifest this update: Mon 26 Oct 2026 03:01:31 +0000 Manifest next update: Tue 27 Oct 2026 03:01:31 +0000 Files and hashes: 1: 76SUa31tX84MMYV-5pJtl_RzfBs.roa (hash: VLwC/xTHEJsdM4oEbJXYgc2X6KgnqYrx1To2cyFfsks=) 2: EQyiKX_7-Wpxq09KJocOiD7iVtg.roa (hash: xSHc+sset4mHHx5Au4SFQGD7gPC3y5Gef/MK9s8Iy4Y=) 3: IqvcRngzlVCtX_OA-70dAZLFdA8.roa (hash: aY3f5nvXyrfMF4R4lR/AbKv7PaJsmbQ5UoA1+i35Mzo=) 4: J6RUNAmoogv7zgMLcCOwk_cTSbw.roa (hash: g+8OdmE2eYFbsqzauS740Ewhw4IU7T/U1OEITUeBDc4=) 5: JYSE_79beIVH7AyGREwVYhRCyTY.roa (hash: l3baob39qaOOP1HD2nUjVfG8gYEyw7b1MgZubnhYeyE=) 6: LlTZm9TRn88VWou6DKeJrZdQgvU.roa (hash: GTQExs7+EOPrcDE70ZQ1HXMC0yUw4J5W6WVSW6HNDyE=) 7: O-CoG-YF7L6hwLeg3uly4Kp8B_8.roa (hash: 5oJU3WpHWPREk+VpJtji8wlNog6GMZ8hQeRSHT6lLd0=) 8: U2Yc5skQvePijZYsWlFophc_BK4.roa (hash: gMfZmKyaceaZgToU/WPMcQ0QQiGVzdWPQc5qXxtNrpw=) 9: WMiYfXfaecilSx0Cw11AX6GHoD0.roa (hash: tfANuqYEsqBC9djOQlOpVgZbpkAcWNv/SHctNZh0ths=) 10: YLu7TqT2RSl1_BNUUxUt12edQaA.roa (hash: paF/KBHEk0JOZSKhbJ4oeNoOGAfMADsXOpIZVHL7RNY=) 11: aQ88EoiiajhYjpR8X9YSC2Itufk.roa (hash: 6ocE7SCCa9OYWlhJzkmE5ODfDYPaMsMSbmqpzzbM+qk=) 12: bKeksz2w4uplaCPFhGd2ZRXJ3L4.roa (hash: V3eyRTLr62Od4hxpOj09Jq4Nekd36hyzHMFde1nQKHM=) 13: cNrzpnZVR-vdGnfMmjiDxUQw38w.roa (hash: jDSBudPBssvuTBaPnXNJhRgSYVM03+9BoPvraHbjsUs=) 14: hOWBX1aqOOkBBDPmSf04HK0FDdQ.roa (hash: TNZ6xI5xHtE38+sW0p4MVYqN1AjK+nGsdspXM65hmqg=) 15: hpQK8Ct69QedB3MH-Zduh7fwfI0.roa (hash: tMKgnvO9EBwmVGsim8vR529voYsTaPvcU9t25lxh9c8=) 16: lE9bYROvMOgfAcJMOq1buSFu5Oc.roa (hash: uM/UbNoBafoN3u4NQaCJ1CV+W48Aj8GUgTcEvh/o4kw=) 17: r16T-QI1TOSAS0ywSc9osg92rrI.crl (hash: vTs7+BDN8nQT6pg+wi+KpHfLKZeiimxVnv4rxIB5Ipk=) 18: sp2MMK9YRqm89c-c8Nk0zqZ0hl0.roa (hash: 4AR1dpezwOfRG52yq/YaU//Ei5bTQmeOkpGOb7/yTjo=) 19: xSn7ixxST4P6sLWhFGPF1kgNAlE.roa (hash: 6Zt2rctbn7D8+hho9smzj15xitIYg/ED9s7TTA4i/jk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/f4004b-d602-475d-931b-7e05ad0190ce/1/r16T-QI1TOSAS0ywSc9osg92rrI.crl rsync://rpki.ripe.net/repository/DEFAULT/42/f4004b-d602-475d-931b-7e05ad0190ce/1/r16T-QI1TOSAS0ywSc9osg92rrI.mft rsync://rpki.ripe.net/repository/DEFAULT/r16T-QI1TOSAS0ywSc9osg92rrI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Oct 2026 02:00:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a1:76:27:f2:9d:99:14:ac:d9:69:33:d6:4e:86:15:0a:d8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=af5e93f902354ce4804b4cb049cf68b20f76aeb2 Validity Not Before: Oct 26 03:01:31 2026 GMT Not After : Oct 27 03:01:31 2026 GMT Subject: CN=f1292bee7612dcfebadd422e01f7b87e71684b2e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:0d:61:68:76:3e:ac:fc:a7:24:20:52:74:44: 30:90:e3:99:42:5b:a9:db:ff:da:5b:c9:71:f1:58: 32:7f:d1:db:43:ab:74:f6:b8:40:18:cb:57:5f:ea: 69:75:b1:a2:89:99:30:3a:a7:e3:86:09:01:4c:b6: 7f:e3:8a:61:6f:2b:ca:ff:6b:50:85:ac:d1:9c:f0: 09:4a:71:bc:bf:2a:56:11:63:d3:aa:c4:2e:64:5a: fc:5b:ca:18:67:48:e0:93:0a:d5:1e:a9:6a:c4:13: 79:10:d3:d9:16:85:88:7e:50:e6:2e:a7:f2:0e:67: fe:5f:d1:56:dd:10:67:ca:ba:b2:73:50:0c:d9:2f: b5:c9:c8:b9:8b:87:c3:a4:27:66:ca:1c:22:70:14: d8:05:98:cd:a9:ff:c0:c9:77:fd:12:14:a3:e5:a6: 89:59:98:f5:70:bb:b1:b7:be:97:37:64:63:f5:61: db:81:a7:30:52:b8:f5:7e:b7:92:2d:12:b3:8a:d1: 09:98:76:a4:2e:e3:32:e4:ce:7c:19:7d:46:bc:dd: 1d:53:22:83:18:51:c1:29:6d:f9:0c:9b:c3:80:76: 2d:fb:d0:45:d9:1f:b4:d6:81:0a:b5:2f:ad:e2:e1: 4e:43:53:40:3f:c1:ec:b1:46:26:d7:a1:6c:43:3e: 28:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:29:2B:EE:76:12:DC:FE:BA:DD:42:2E:01:F7:B8:7E:71:68:4B:2E X509v3 Authority Key Identifier: keyid:AF:5E:93:F9:02:35:4C:E4:80:4B:4C:B0:49:CF:68:B2:0F:76:AE:B2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r16T-QI1TOSAS0ywSc9osg92rrI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/f4004b-d602-475d-931b-7e05ad0190ce/1/r16T-QI1TOSAS0ywSc9osg92rrI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/42/f4004b-d602-475d-931b-7e05ad0190ce/1/r16T-QI1TOSAS0ywSc9osg92rrI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7e:05:65:04:3f:47:ca:ce:23:18:24:cf:48:b5:3e:03:cb:8e: 92:c4:31:f4:a2:c7:f8:31:e0:f7:e7:d1:cf:ff:d1:f3:1c:af: c2:fd:35:00:46:b0:b5:51:10:9b:5c:54:92:07:88:c2:7b:08: b0:3b:25:a8:a2:1e:f1:af:08:b1:f7:87:24:2e:34:8c:cd:19: c8:99:8a:5e:58:33:03:51:26:3e:2a:bc:98:38:a9:78:f6:f7: e7:d6:5e:3a:48:90:2b:78:1c:d1:d9:2d:49:77:65:79:ee:5c: e1:30:b7:bb:1b:64:a5:43:1a:bf:4e:6b:cb:bd:f3:32:54:bd: 62:0b:fe:92:ef:ac:fb:44:b5:5e:97:1c:94:57:fc:df:4e:ad: 29:70:2d:4c:3d:ec:37:ea:a0:08:59:86:c6:c0:0b:da:70:ef: 39:00:f8:6d:a4:69:b3:cb:40:02:4a:1d:65:8a:32:ef:6d:e4: 97:c0:36:c9:66:29:18:00:20:c7:16:44:37:40:58:18:4c:c6: 5b:f9:7e:73:5c:aa:0e:a8:4a:fb:41:ba:a5:8e:ef:72:12:b0: 5c:0d:83:ba:b0:8c:58:14:2d:28:55:d7:91:ce:e0:41:d8:1e: 06:7a:96:dc:01:21:a2:6c:38:1b:4a:60:dd:6d:63:ac:46:8b: df:6f:74:eb -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaF2J/KdmRSs2Wkz1k6GFQrYMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFmNWU5M2Y5MDIzNTRjZTQ4MDRiNGNiMDQ5Y2Y2OGIyMGY3 NmFlYjIwHhcNMjYxMDI2MDMwMTMxWhcNMjYxMDI3MDMwMTMxWjAzMTEwLwYDVQQD EyhmMTI5MmJlZTc2MTJkY2ZlYmFkZDQyMmUwMWY3Yjg3ZTcxNjg0YjJlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnw1haHY+rPynJCBSdEQwkOOZQlup 2//aW8lx8Vgyf9HbQ6t09rhAGMtXX+ppdbGiiZkwOqfjhgkBTLZ/44phbyvK/2tQ hazRnPAJSnG8vypWEWPTqsQuZFr8W8oYZ0jgkwrVHqlqxBN5ENPZFoWIflDmLqfy Dmf+X9FW3RBnyrqyc1AM2S+1yci5i4fDpCdmyhwicBTYBZjNqf/AyXf9EhSj5aaJ WZj1cLuxt76XN2Rj9WHbgacwUrj1freSLRKzitEJmHakLuMy5M58GX1GvN0dUyKD GFHBKW35DJvDgHYt+9BF2R+01oEKtS+t4uFOQ1NAP8HssUYm16FsQz4otQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPEpK+52Etz+ut1CLgH3uH5xaEsuMB8GA1UdIwQY MBaAFK9ek/kCNUzkgEtMsEnPaLIPdq6yMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcjE2VC1RSTFUT1NBUzB5d1NjOW9zZzkycnJJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Mi9mNDAwNGItZDYwMi00NzVkLTkzMWIt N2UwNWFkMDE5MGNlLzEvcjE2VC1RSTFUT1NBUzB5d1NjOW9zZzkycnJJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Mi9mNDAwNGItZDYwMi00NzVkLTkzMWItN2UwNWFkMDE5MGNl LzEvcjE2VC1RSTFUT1NBUzB5d1NjOW9zZzkycnJJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfgVlBD9H ys4jGCTPSLU+A8uOksQx9KLH+DHg9+fRz//R8xyvwv01AEawtVEQm1xUkgeIwnsI sDslqKIe8a8IsfeHJC40jM0ZyJmKXlgzA1EmPiq8mDipePb359ZeOkiQK3gc0dkt SXdlee5c4TC3uxtkpUMav05ry73zMlS9Ygv+ku+s+0S1XpcclFf8306tKXAtTD3s N+qgCFmGxsAL2nDvOQD4baRps8tAAkodZYoy723kl8A2yWYpGAAgxxZEN0BYGEzG W/l+c1yqDqhK+0G6pY7vchKwXA2DurCMWBQtKFXXkc7gQdgeBnqW3AEhomw4G0pg 3W1jrEaL32906w== -----END CERTIFICATE-----Generated at Mon Oct 26 12:43:37 2026 by rpki-client