$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/12/edc855-f2bc-4e9c-8c0c-b6f2ac86ef27/1/gho_IfsMKU1tSlKbLx29S9ERm9c.mft File: gho_IfsMKU1tSlKbLx29S9ERm9c.mft (raw, json) Hash identifier: mvExUdexDxOlAf43HiDRRr3WpXzmgKDmEVegsDK3B7Y= Subject key identifier: 30:11:3C:81:26:76:1B:D9:1C:57:EE:47:ED:39:C4:A3:3B:DE:E1:44 Authority key identifier: 82:1A:3F:21:FB:0C:29:4D:6D:4A:52:9B:2F:1D:BD:4B:D1:11:9B:D7 Certificate issuer: /CN=821a3f21fb0c294d6d4a529b2f1dbd4bd1119bd7 Certificate serial: 01A09DA541440A0E8B44DB1CD8D7EC24A742 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gho_IfsMKU1tSlKbLx29S9ERm9c.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/edc855-f2bc-4e9c-8c0c-b6f2ac86ef27/1/gho_IfsMKU1tSlKbLx29S9ERm9c.mft Manifest number: 14B8 Signing time: Mon 14 Sep 2026 02:00:48 +0000 Manifest this update: Mon 14 Sep 2026 02:00:48 +0000 Manifest next update: Tue 15 Sep 2026 02:00:48 +0000 Files and hashes: 1: 94DmWvO75aSCrTILT7xO5QfIZ4Q.roa (hash: yowEVWaH5JasWlMxUT7Mgz1/3iSP8rVz/KjlsGeBATs=) 2: I0ycopSi6_q86tsS_2ZsGMaSE7E.roa (hash: X5k67tgIigX44haykK5HKygDUVpwt1sPzwvIgtRhgUo=) 3: Lw_o47E9qYaZtJPZjp5m1M1e0_o.roa (hash: TnHpGib6gDq3lP3ubauOs2iA7D/xB8DKvaZF7GPTkuk=) 4: MRCItQ1B9948OVdVK1kL96AGPQI.roa (hash: ZQgpMxwvj3QAdwytn7kSRtX4MaK4Pcv8MlZ4Lzpi3Pg=) 5: OQ-6VTdp1vw9GrjNLFmvI9JYOrs.roa (hash: ZPmtBIJ2La5bnUm+sApv+AeoWDVjiZhyYSZEHB1jKmo=) 6: OxJM60qRQUOtdqYrv27xs3_kv9k.roa (hash: w3ZIUcbiJQn/X+ANNYduQprQtRgqv43tl64iIBJ+uVs=) 7: PujNlKftYzeQaE0MnZm0EPh4AFY.roa (hash: KOYoiHizuILiOcTb5DR0niku+PQ57DIf210w8rlbdQY=) 8: PyHODj5n0DejAoWrQZBIRXaXo6Y.roa (hash: 3ofBNW8DPxuvHoS9tkTr0YH1zUrrGyXEWYQ/aOGrjNI=) 9: RTPP9X2zvoR_qL8VtqZr6WEHKzw.roa (hash: bz39/MS5H8r1qd18PCFQ3+2kRu1MJoP1Vd1Xyr//BW0=) 10: WGYchnyCAbqQd8pzwZhRwcjvgv8.roa (hash: I9YjzWZ/pqf8yScr+6TqbtawBHd4EYuPwRC5bUBqVQw=) 11: Wz0IiveJRR3iZ_TFadI3Bt6mJJE.roa (hash: CImcnKPxhqg5cF+ps6Yupe+fhV0VE9C6rzuLTV7FS3Q=) 12: X2QsnfxAM9ScjVh_AzAztNDaXJg.roa (hash: L4YEdLYOkjYPPZMBRJDRYkJkVBQq0athDIG3eYPShmM=) 13: Z_IuqEKKfXuEOIP93u24e6BLk0E.roa (hash: 9YG/wmkjQ+naLweN0fWYFNb6KTTbRHlNigN8yWNOBNk=) 14: bjs_zJFuHzjoxK2NthqbKcV1s-8.roa (hash: Eg2O923oFj6n/iosVJD0SXVlsUTZEP0y964Jkw4vJR0=) 15: gho_IfsMKU1tSlKbLx29S9ERm9c.crl (hash: Ff8BsFctT+tSaKuQGpOHfybcciSV132EfrPGqhi4FVQ=) 16: kELckgtwVoSvJeEmqDzRwJ_w8M4.roa (hash: ryrV6l1reh0IiB1vVcw5FXf5SQ2NaFZbF4Pl/NJCuQ4=) 17: u26dzWx1WsuAyPhRE3IG1GMmdJc.roa (hash: gEHPHjFqESUZPon7FHlszrJPYiDLqkhRmgKIOhvsfGY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/edc855-f2bc-4e9c-8c0c-b6f2ac86ef27/1/gho_IfsMKU1tSlKbLx29S9ERm9c.crl rsync://rpki.ripe.net/repository/DEFAULT/12/edc855-f2bc-4e9c-8c0c-b6f2ac86ef27/1/gho_IfsMKU1tSlKbLx29S9ERm9c.mft rsync://rpki.ripe.net/repository/DEFAULT/gho_IfsMKU1tSlKbLx29S9ERm9c.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 14 Sep 2026 23:00:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a0:9d:a5:41:44:0a:0e:8b:44:db:1c:d8:d7:ec:24:a7:42 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=821a3f21fb0c294d6d4a529b2f1dbd4bd1119bd7 Validity Not Before: Sep 14 02:00:48 2026 GMT Not After : Sep 15 02:00:48 2026 GMT Subject: CN=30113c8126761bd91c57ee47ed39c4a33bdee144 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:bf:79:61:f4:d5:fd:4b:aa:c0:89:f5:e0:b0: 1a:7b:eb:ce:c6:ba:aa:91:5f:14:df:47:e7:29:b0: 17:26:7e:d4:2f:c7:48:98:79:5e:e1:0d:4b:3e:86: 8b:ce:88:01:b0:35:fa:f2:07:36:a6:b4:01:6e:15: 4b:32:21:52:54:c5:92:30:62:56:6a:44:07:54:70: f6:94:f2:d1:05:7e:58:6b:38:78:1a:44:45:c1:48: 90:de:70:98:75:8a:04:a9:1d:56:47:5d:5b:31:7b: 32:a9:90:d9:07:02:52:e4:c1:33:fd:bb:01:8e:9d: 48:01:ae:7d:56:85:33:69:99:52:f7:e4:ad:86:71: 70:0e:16:aa:0f:e4:8a:dc:d2:37:cd:b1:dd:9c:f1: 3a:af:e4:16:44:bc:8d:50:f3:bf:69:26:07:d0:45: a5:92:04:fd:f0:2c:50:d8:ea:f8:4c:fd:20:4f:9e: 2b:4e:a6:a2:e0:c7:3d:2f:68:80:57:0d:82:31:5a: 28:b2:a4:11:9f:6d:47:f8:fb:21:cc:ce:73:9f:dd: 9b:d1:b8:94:cd:cd:56:74:4b:2e:ae:ba:15:66:3f: 77:a6:51:06:b6:57:fa:be:83:57:12:27:c2:9e:70: ec:e1:eb:0c:56:60:8a:c5:1d:4b:34:7b:f3:a0:0f: fb:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:11:3C:81:26:76:1B:D9:1C:57:EE:47:ED:39:C4:A3:3B:DE:E1:44 X509v3 Authority Key Identifier: keyid:82:1A:3F:21:FB:0C:29:4D:6D:4A:52:9B:2F:1D:BD:4B:D1:11:9B:D7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gho_IfsMKU1tSlKbLx29S9ERm9c.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/edc855-f2bc-4e9c-8c0c-b6f2ac86ef27/1/gho_IfsMKU1tSlKbLx29S9ERm9c.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/12/edc855-f2bc-4e9c-8c0c-b6f2ac86ef27/1/gho_IfsMKU1tSlKbLx29S9ERm9c.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4d:cd:6f:2e:5f:c8:bd:f6:07:f0:3f:82:1c:97:ec:62:db:3c: 51:c7:36:df:a1:c3:cc:ff:70:2f:52:4b:15:de:81:b3:85:51: bb:80:8b:b6:1f:59:24:63:bf:c9:0c:ed:73:19:c7:90:9b:f8: 20:01:3a:c4:a9:64:40:cf:9b:f2:c3:58:22:e0:05:6a:36:7a: d3:4e:27:5d:c9:a1:b8:76:f6:f7:c9:67:16:93:b3:a2:72:71: cd:f7:e9:11:af:7b:34:1a:b9:81:9b:5d:ad:6c:29:d5:01:6a: 2c:7a:5b:6a:e4:7a:f3:c7:56:a2:bc:db:05:d1:90:07:6d:cc: 7c:1f:09:96:b1:eb:0a:a7:1f:56:1a:8f:65:08:b0:8e:6e:48: e0:6d:08:46:cf:03:fe:e9:8c:6d:c2:0f:5f:85:6e:5d:c3:60: 8b:b4:ed:68:67:a0:cd:25:41:03:13:bf:d3:35:0f:c3:e0:29: 01:4e:da:7d:bf:f8:6a:cc:3b:54:74:aa:ba:6c:9c:f1:40:14: 42:a9:74:7d:c9:47:11:01:1d:0c:cf:42:7d:02:44:51:86:bc: f5:70:85:ce:3e:68:18:5b:85:5a:4d:ad:ea:ac:51:ed:a0:34: 7f:fe:4b:db:25:24:96:1d:b4:77:60:8d:74:52:f7:38:08:b1: 37:3e:6a:86 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaCdpUFECg6LRNsc2NfsJKdCMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDgyMWEzZjIxZmIwYzI5NGQ2ZDRhNTI5YjJmMWRiZDRiZDEx MTliZDcwHhcNMjYwOTE0MDIwMDQ4WhcNMjYwOTE1MDIwMDQ4WjAzMTEwLwYDVQQD EygzMDExM2M4MTI2NzYxYmQ5MWM1N2VlNDdlZDM5YzRhMzNiZGVlMTQ0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkL95YfTV/UuqwIn14LAae+vOxrqq kV8U30fnKbAXJn7UL8dImHle4Q1LPoaLzogBsDX68gc2prQBbhVLMiFSVMWSMGJW akQHVHD2lPLRBX5Yazh4GkRFwUiQ3nCYdYoEqR1WR11bMXsyqZDZBwJS5MEz/bsB jp1IAa59VoUzaZlS9+SthnFwDhaqD+SK3NI3zbHdnPE6r+QWRLyNUPO/aSYH0EWl kgT98CxQ2Or4TP0gT54rTqai4Mc9L2iAVw2CMVoosqQRn21H+PshzM5zn92b0biU zc1WdEsurroVZj93plEGtlf6voNXEifCnnDs4esMVmCKxR1LNHvzoA/7LwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDARPIEmdhvZHFfuR+05xKM73uFEMB8GA1UdIwQY MBaAFIIaPyH7DClNbUpSmy8dvUvREZvXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZ2hvX0lmc01LVTF0U2xLYkx4MjlTOUVSbTljLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMi9lZGM4NTUtZjJiYy00ZTljLThjMGMt YjZmMmFjODZlZjI3LzEvZ2hvX0lmc01LVTF0U2xLYkx4MjlTOUVSbTljLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMi9lZGM4NTUtZjJiYy00ZTljLThjMGMtYjZmMmFjODZlZjI3 LzEvZ2hvX0lmc01LVTF0U2xLYkx4MjlTOUVSbTljLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATc1vLl/I vfYH8D+CHJfsYts8Ucc236HDzP9wL1JLFd6Bs4VRu4CLth9ZJGO/yQztcxnHkJv4 IAE6xKlkQM+b8sNYIuAFajZ6004nXcmhuHb298lnFpOzonJxzffpEa97NBq5gZtd rWwp1QFqLHpbauR688dWorzbBdGQB23MfB8JlrHrCqcfVhqPZQiwjm5I4G0IRs8D /umMbcIPX4VuXcNgi7TtaGegzSVBAxO/0zUPw+ApAU7afb/4asw7VHSqumyc8UAU Qql0fclHEQEdDM9CfQJEUYa89XCFzj5oGFuFWk2t6qxR7aA0f/5L2yUklh20d2CN dFL3OAixNz5qhg== -----END CERTIFICATE-----Generated at Mon Sep 14 09:32:16 2026 by rpki-client