
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/42/f4004b-d602-475d-931b-7e05ad0190ce/1/r16T-QI1TOSAS0ywSc9osg92rrI.mft
File: r16T-QI1TOSAS0ywSc9osg92rrI.mft (raw, json)
Hash identifier: AWyQK1TzySPEOp04uB3WSCYe+geoweReyBrR31Sb8H0=
Subject key identifier: 79:C5:FF:E6:21:54:59:02:C8:83:0D:84:EF:2F:94:FB:34:3B:C0:DE
Authority key identifier: AF:5E:93:F9:02:35:4C:E4:80:4B:4C:B0:49:CF:68:B2:0F:76:AE:B2
Certificate issuer: /CN=af5e93f902354ce4804b4cb049cf68b20f76aeb2
Certificate serial: 01A0C28D5E8E697D7AFFB9F12CAD59303AA8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r16T-QI1TOSAS0ywSc9osg92rrI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/f4004b-d602-475d-931b-7e05ad0190ce/1/r16T-QI1TOSAS0ywSc9osg92rrI.mft
Manifest number: 16F7
Signing time: Mon 21 Sep 2026 06:00:39 +0000
Manifest this update: Mon 21 Sep 2026 06:00:39 +0000
Manifest next update: Tue 22 Sep 2026 06:00:39 +0000
Files and hashes: 1: 76SUa31tX84MMYV-5pJtl_RzfBs.roa (hash: VLwC/xTHEJsdM4oEbJXYgc2X6KgnqYrx1To2cyFfsks=)
2: EQyiKX_7-Wpxq09KJocOiD7iVtg.roa (hash: xSHc+sset4mHHx5Au4SFQGD7gPC3y5Gef/MK9s8Iy4Y=)
3: IqvcRngzlVCtX_OA-70dAZLFdA8.roa (hash: aY3f5nvXyrfMF4R4lR/AbKv7PaJsmbQ5UoA1+i35Mzo=)
4: J6RUNAmoogv7zgMLcCOwk_cTSbw.roa (hash: g+8OdmE2eYFbsqzauS740Ewhw4IU7T/U1OEITUeBDc4=)
5: JYSE_79beIVH7AyGREwVYhRCyTY.roa (hash: l3baob39qaOOP1HD2nUjVfG8gYEyw7b1MgZubnhYeyE=)
6: LlTZm9TRn88VWou6DKeJrZdQgvU.roa (hash: GTQExs7+EOPrcDE70ZQ1HXMC0yUw4J5W6WVSW6HNDyE=)
7: O-CoG-YF7L6hwLeg3uly4Kp8B_8.roa (hash: 5oJU3WpHWPREk+VpJtji8wlNog6GMZ8hQeRSHT6lLd0=)
8: U2Yc5skQvePijZYsWlFophc_BK4.roa (hash: gMfZmKyaceaZgToU/WPMcQ0QQiGVzdWPQc5qXxtNrpw=)
9: WMiYfXfaecilSx0Cw11AX6GHoD0.roa (hash: tfANuqYEsqBC9djOQlOpVgZbpkAcWNv/SHctNZh0ths=)
10: YLu7TqT2RSl1_BNUUxUt12edQaA.roa (hash: paF/KBHEk0JOZSKhbJ4oeNoOGAfMADsXOpIZVHL7RNY=)
11: aQ88EoiiajhYjpR8X9YSC2Itufk.roa (hash: 6ocE7SCCa9OYWlhJzkmE5ODfDYPaMsMSbmqpzzbM+qk=)
12: bKeksz2w4uplaCPFhGd2ZRXJ3L4.roa (hash: V3eyRTLr62Od4hxpOj09Jq4Nekd36hyzHMFde1nQKHM=)
13: cNrzpnZVR-vdGnfMmjiDxUQw38w.roa (hash: jDSBudPBssvuTBaPnXNJhRgSYVM03+9BoPvraHbjsUs=)
14: hOWBX1aqOOkBBDPmSf04HK0FDdQ.roa (hash: TNZ6xI5xHtE38+sW0p4MVYqN1AjK+nGsdspXM65hmqg=)
15: hpQK8Ct69QedB3MH-Zduh7fwfI0.roa (hash: tMKgnvO9EBwmVGsim8vR529voYsTaPvcU9t25lxh9c8=)
16: lE9bYROvMOgfAcJMOq1buSFu5Oc.roa (hash: uM/UbNoBafoN3u4NQaCJ1CV+W48Aj8GUgTcEvh/o4kw=)
17: r16T-QI1TOSAS0ywSc9osg92rrI.crl (hash: +4BTuLHrKyV5CvfkKrtIsL2RebvfeeJK8quLDVv+0zo=)
18: sp2MMK9YRqm89c-c8Nk0zqZ0hl0.roa (hash: 4AR1dpezwOfRG52yq/YaU//Ei5bTQmeOkpGOb7/yTjo=)
19: xSn7ixxST4P6sLWhFGPF1kgNAlE.roa (hash: 6Zt2rctbn7D8+hho9smzj15xitIYg/ED9s7TTA4i/jk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/f4004b-d602-475d-931b-7e05ad0190ce/1/r16T-QI1TOSAS0ywSc9osg92rrI.crl
rsync://rpki.ripe.net/repository/DEFAULT/42/f4004b-d602-475d-931b-7e05ad0190ce/1/r16T-QI1TOSAS0ywSc9osg92rrI.mft
rsync://rpki.ripe.net/repository/DEFAULT/r16T-QI1TOSAS0ywSc9osg92rrI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 06:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c2:8d:5e:8e:69:7d:7a:ff:b9:f1:2c:ad:59:30:3a:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=af5e93f902354ce4804b4cb049cf68b20f76aeb2
Validity
Not Before: Sep 21 06:00:39 2026 GMT
Not After : Sep 22 06:00:39 2026 GMT
Subject: CN=79c5ffe621545902c8830d84ef2f94fb343bc0de
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:20:fd:eb:d4:78:41:3a:e9:29:2a:f3:54:9b:
2f:23:e8:19:e9:a6:ce:7b:53:45:bb:1a:00:f6:a9:
00:c0:1e:27:c9:10:4e:24:81:3d:d4:91:94:c2:cc:
8e:8b:d6:4d:2c:77:bf:0c:dc:0e:e7:78:d3:6b:56:
29:56:7c:98:3a:ca:f5:b5:9d:b4:74:ec:67:95:14:
80:17:60:c2:40:1a:6b:d8:0c:b4:a6:48:94:03:66:
a1:77:7b:e8:45:f6:b8:a2:ac:f8:38:c8:9f:bf:59:
22:24:37:73:fe:25:bf:2b:cd:20:0c:59:0f:19:26:
86:72:a4:35:85:2b:e0:9a:3b:f4:ad:54:01:14:38:
4f:39:08:43:d8:f5:5b:f5:11:33:6a:50:4e:15:7b:
d4:d2:94:1a:8d:9b:7a:31:6d:85:56:8a:e0:0a:c6:
71:97:fa:15:2f:5d:04:de:d8:60:bb:18:08:fe:ad:
43:65:3f:18:0c:f3:bf:cc:6b:1f:5f:57:a3:a7:7b:
1f:d6:68:a4:9a:93:ab:b4:3b:b2:5e:56:c5:fc:8a:
77:e4:13:06:20:37:33:9e:a9:66:99:cc:50:02:f3:
a5:05:17:b6:91:3c:c3:7b:e8:54:b7:ea:58:d1:43:
ad:f2:9e:2e:72:96:3f:d5:3e:35:ec:78:6a:a0:58:
24:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:C5:FF:E6:21:54:59:02:C8:83:0D:84:EF:2F:94:FB:34:3B:C0:DE
X509v3 Authority Key Identifier:
keyid:AF:5E:93:F9:02:35:4C:E4:80:4B:4C:B0:49:CF:68:B2:0F:76:AE:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r16T-QI1TOSAS0ywSc9osg92rrI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/f4004b-d602-475d-931b-7e05ad0190ce/1/r16T-QI1TOSAS0ywSc9osg92rrI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/f4004b-d602-475d-931b-7e05ad0190ce/1/r16T-QI1TOSAS0ywSc9osg92rrI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:8d:88:0e:29:e0:5e:34:e4:66:43:d0:49:8e:4e:f6:1a:21:
a7:b2:a6:27:f6:3d:52:8d:95:f1:ad:ae:d5:99:2c:d0:c7:65:
55:6c:b8:e7:3c:24:64:65:17:37:f0:89:f8:96:03:b7:0d:22:
59:1b:ef:02:44:fa:1d:af:c1:ac:72:f9:9c:e7:d8:33:34:f2:
7f:7f:3a:83:09:c6:8d:ae:8f:64:32:c0:20:4d:7a:0b:b1:c9:
bf:d2:fe:ec:fb:68:55:9c:99:c6:60:af:a9:e9:15:9c:f7:4a:
ce:ed:ce:ea:61:45:ab:56:dc:0d:d3:0c:3f:b5:62:58:50:68:
30:2c:ef:75:f3:44:e5:e4:20:0d:58:d2:16:f1:d6:fb:cc:96:
fe:87:c0:b5:0e:a2:bb:3a:35:e9:3f:78:48:ce:8c:cf:0a:95:
01:dc:f5:54:d4:80:b3:c7:7e:4a:e1:c1:0e:4a:44:d5:18:df:
93:02:d9:a4:03:b0:a2:e7:ce:c9:ac:a2:57:f4:08:27:54:4c:
11:66:f5:42:8a:18:db:b6:ed:f5:3d:a9:b5:98:59:fe:29:13:
15:6e:49:39:72:4a:44:35:f6:89:8f:b2:39:5e:c2:a0:6c:15:
da:ec:bb:a3:b4:76:6d:59:f4:b1:c3:46:16:2a:fa:26:a8:25:
ec:b3:cb:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 13:30:14 2026 by rpki-client