
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/edc855-f2bc-4e9c-8c0c-b6f2ac86ef27/1/gho_IfsMKU1tSlKbLx29S9ERm9c.mft
File: gho_IfsMKU1tSlKbLx29S9ERm9c.mft (raw, json)
Hash identifier: auQRbliPVJN5Q0aLvCitxm9TZ/TXrH3vTUn9kjIUqq8=
Subject key identifier: 11:41:DF:46:90:84:E7:62:35:13:14:75:03:15:36:C7:32:BF:53:DA
Authority key identifier: 82:1A:3F:21:FB:0C:29:4D:6D:4A:52:9B:2F:1D:BD:4B:D1:11:9B:D7
Certificate issuer: /CN=821a3f21fb0c294d6d4a529b2f1dbd4bd1119bd7
Certificate serial: 019E64CDC33709753F9388D609526ECB4119
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gho_IfsMKU1tSlKbLx29S9ERm9c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/edc855-f2bc-4e9c-8c0c-b6f2ac86ef27/1/gho_IfsMKU1tSlKbLx29S9ERm9c.mft
Manifest number: 138F
Signing time: Tue 26 May 2026 15:01:06 +0000
Manifest this update: Tue 26 May 2026 15:01:06 +0000
Manifest next update: Wed 27 May 2026 15:01:06 +0000
Files and hashes: 1: 2FTZk29N4ByQY45BtJSQSIVpVRM.roa (hash: rAVovOm/njZtMMmGMfPRxJdixQBe2en8/pj68uz5a98=)
2: 94DmWvO75aSCrTILT7xO5QfIZ4Q.roa (hash: yowEVWaH5JasWlMxUT7Mgz1/3iSP8rVz/KjlsGeBATs=)
3: Lw_o47E9qYaZtJPZjp5m1M1e0_o.roa (hash: TnHpGib6gDq3lP3ubauOs2iA7D/xB8DKvaZF7GPTkuk=)
4: MRCItQ1B9948OVdVK1kL96AGPQI.roa (hash: ZQgpMxwvj3QAdwytn7kSRtX4MaK4Pcv8MlZ4Lzpi3Pg=)
5: OFjegJjxvcb4sj9nFgT2lfhHX4s.roa (hash: IYubfyClKzPMzSFo0EthrRHOvnb4H46ku4bTbgAoW7k=)
6: OQ-6VTdp1vw9GrjNLFmvI9JYOrs.roa (hash: ZPmtBIJ2La5bnUm+sApv+AeoWDVjiZhyYSZEHB1jKmo=)
7: OxJM60qRQUOtdqYrv27xs3_kv9k.roa (hash: w3ZIUcbiJQn/X+ANNYduQprQtRgqv43tl64iIBJ+uVs=)
8: PyHODj5n0DejAoWrQZBIRXaXo6Y.roa (hash: 3ofBNW8DPxuvHoS9tkTr0YH1zUrrGyXEWYQ/aOGrjNI=)
9: RTPP9X2zvoR_qL8VtqZr6WEHKzw.roa (hash: bz39/MS5H8r1qd18PCFQ3+2kRu1MJoP1Vd1Xyr//BW0=)
10: WGYchnyCAbqQd8pzwZhRwcjvgv8.roa (hash: I9YjzWZ/pqf8yScr+6TqbtawBHd4EYuPwRC5bUBqVQw=)
11: Wz0IiveJRR3iZ_TFadI3Bt6mJJE.roa (hash: CImcnKPxhqg5cF+ps6Yupe+fhV0VE9C6rzuLTV7FS3Q=)
12: X2QsnfxAM9ScjVh_AzAztNDaXJg.roa (hash: L4YEdLYOkjYPPZMBRJDRYkJkVBQq0athDIG3eYPShmM=)
13: Z_IuqEKKfXuEOIP93u24e6BLk0E.roa (hash: 9YG/wmkjQ+naLweN0fWYFNb6KTTbRHlNigN8yWNOBNk=)
14: gho_IfsMKU1tSlKbLx29S9ERm9c.crl (hash: PtQvDXjaJ+teEgT4wAPPVwPfo473bOhuSlLyeM10nVw=)
15: htqKUhJyQNt1qA3G44rlxCxq60M.roa (hash: id0wxN4WW72w7KuwB5zxXQt9wJQv2b/0iQarjkgrnuM=)
16: t4R25ZXPVStjauKJN0GTtODr3yU.roa (hash: g5h7UJb9yZQYOvckJX3+K/kTtGb30JhlTLu3Ss9IriI=)
17: u26dzWx1WsuAyPhRE3IG1GMmdJc.roa (hash: gEHPHjFqESUZPon7FHlszrJPYiDLqkhRmgKIOhvsfGY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/edc855-f2bc-4e9c-8c0c-b6f2ac86ef27/1/gho_IfsMKU1tSlKbLx29S9ERm9c.crl
rsync://rpki.ripe.net/repository/DEFAULT/12/edc855-f2bc-4e9c-8c0c-b6f2ac86ef27/1/gho_IfsMKU1tSlKbLx29S9ERm9c.mft
rsync://rpki.ripe.net/repository/DEFAULT/gho_IfsMKU1tSlKbLx29S9ERm9c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 27 May 2026 15:01:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:64:cd:c3:37:09:75:3f:93:88:d6:09:52:6e:cb:41:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=821a3f21fb0c294d6d4a529b2f1dbd4bd1119bd7
Validity
Not Before: May 26 15:01:06 2026 GMT
Not After : May 27 15:01:06 2026 GMT
Subject: CN=1141df469084e76235131475031536c732bf53da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:9f:e6:0c:04:e0:53:b1:0c:18:31:dc:ab:19:
89:33:5f:54:c7:f9:6c:e3:f5:d1:48:44:7d:18:9b:
e3:ec:20:b5:b8:3e:78:69:1c:58:eb:0e:28:a4:d4:
85:81:9a:64:69:c6:eb:f8:fa:4e:09:19:b5:c4:a4:
a5:35:f2:50:90:9e:8c:b2:9b:62:80:3f:37:74:78:
b6:22:79:9d:f1:e5:33:b7:e9:30:2d:23:60:f7:15:
ea:2b:90:08:2c:d4:d3:a0:7f:53:59:3b:16:3c:74:
b8:91:03:4e:ef:90:84:49:87:9d:75:e0:5c:75:31:
b4:0c:a7:a2:80:3f:d1:7b:f7:c7:4e:e8:cc:1f:30:
c4:37:2a:e3:c7:16:af:43:24:fd:5d:21:1f:67:4d:
bc:ef:9d:23:f9:9c:e1:0e:8e:08:b0:97:e7:cf:b0:
3a:1d:41:85:80:a1:d1:e0:a5:36:b9:34:19:e3:da:
0c:3a:b5:ee:e4:3f:a0:0a:1d:b6:43:94:d7:3f:7d:
9e:f6:78:e4:6c:ea:c9:e6:70:95:3d:cf:1f:81:de:
d6:1a:b9:7f:5a:c4:5b:5a:64:07:73:c9:81:b9:ad:
6a:cc:0f:7f:dc:25:f3:c0:e4:21:5e:40:93:ff:50:
be:54:b2:c1:4e:bf:72:cc:47:4f:a8:b2:83:91:29:
98:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:41:DF:46:90:84:E7:62:35:13:14:75:03:15:36:C7:32:BF:53:DA
X509v3 Authority Key Identifier:
keyid:82:1A:3F:21:FB:0C:29:4D:6D:4A:52:9B:2F:1D:BD:4B:D1:11:9B:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gho_IfsMKU1tSlKbLx29S9ERm9c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/edc855-f2bc-4e9c-8c0c-b6f2ac86ef27/1/gho_IfsMKU1tSlKbLx29S9ERm9c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/edc855-f2bc-4e9c-8c0c-b6f2ac86ef27/1/gho_IfsMKU1tSlKbLx29S9ERm9c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:5e:50:a8:f3:9d:9e:69:9e:a4:d2:d9:f0:d0:b9:0c:b4:68:
c9:05:2e:ef:30:cd:53:ab:7b:cf:00:30:95:e4:0f:8a:82:a0:
e6:68:28:5a:c4:95:e7:f6:f1:fb:5a:65:74:df:37:4a:e8:ed:
8b:c0:f8:ef:c9:ef:7f:48:fb:fc:67:de:b9:23:f0:92:83:b9:
c9:72:48:b6:7f:8f:ad:c5:f5:d7:bb:b6:cf:be:4f:04:41:32:
ca:b0:7d:6d:b3:79:62:e1:4c:57:d7:47:aa:4a:93:e5:ad:73:
d1:45:28:c1:cf:bf:01:1a:cd:79:71:9e:c1:4a:b2:64:02:b5:
59:fb:3f:d8:2a:85:d6:91:a6:ca:13:19:4b:0e:b3:c9:b6:6e:
6f:a2:c7:e4:5c:7b:70:5e:95:59:a3:cd:24:e8:8b:ce:e2:42:
5c:82:99:ea:ad:37:3b:5a:76:d1:1f:5c:b9:a5:4a:3e:15:c4:
96:e4:ee:5e:97:a7:8d:1a:4b:51:35:89:5e:c5:cb:0d:73:fc:
e2:fd:10:4e:fa:80:7b:79:c5:bf:e7:ad:80:0f:8e:7c:7c:1c:
f0:e0:23:02:2d:a0:73:39:43:7c:ed:80:c1:38:99:2b:6c:88:
ed:c5:6a:e3:7c:0b:6b:3c:fe:f7:c8:2e:1d:17:e2:89:12:6b:
59:6a:fa:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 27 02:09:32 2026 by rpki-client