$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/12/edc855-f2bc-4e9c-8c0c-b6f2ac86ef27/1/gho_IfsMKU1tSlKbLx29S9ERm9c.mft File: gho_IfsMKU1tSlKbLx29S9ERm9c.mft (raw, json) Hash identifier: QvPiixeeoUYqbZdLUGsY/xU9J+OfHDyZeG3Oh/8V5mU= Subject key identifier: 2C:00:01:E1:57:6B:0B:EB:84:FD:F1:E6:FC:C3:AB:B4:9A:34:15:F1 Authority key identifier: 82:1A:3F:21:FB:0C:29:4D:6D:4A:52:9B:2F:1D:BD:4B:D1:11:9B:D7 Certificate issuer: /CN=821a3f21fb0c294d6d4a529b2f1dbd4bd1119bd7 Certificate serial: 01A18B2E7306236128F1852080C970C7E18A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gho_IfsMKU1tSlKbLx29S9ERm9c.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/edc855-f2bc-4e9c-8c0c-b6f2ac86ef27/1/gho_IfsMKU1tSlKbLx29S9ERm9c.mft Manifest number: 1533 Signing time: Fri 30 Oct 2026 05:00:39 +0000 Manifest this update: Fri 30 Oct 2026 05:00:39 +0000 Manifest next update: Sat 31 Oct 2026 05:00:39 +0000 Files and hashes: 1: 94DmWvO75aSCrTILT7xO5QfIZ4Q.roa (hash: yowEVWaH5JasWlMxUT7Mgz1/3iSP8rVz/KjlsGeBATs=) 2: I0ycopSi6_q86tsS_2ZsGMaSE7E.roa (hash: X5k67tgIigX44haykK5HKygDUVpwt1sPzwvIgtRhgUo=) 3: Lw_o47E9qYaZtJPZjp5m1M1e0_o.roa (hash: TnHpGib6gDq3lP3ubauOs2iA7D/xB8DKvaZF7GPTkuk=) 4: MRCItQ1B9948OVdVK1kL96AGPQI.roa (hash: ZQgpMxwvj3QAdwytn7kSRtX4MaK4Pcv8MlZ4Lzpi3Pg=) 5: OQ-6VTdp1vw9GrjNLFmvI9JYOrs.roa (hash: ZPmtBIJ2La5bnUm+sApv+AeoWDVjiZhyYSZEHB1jKmo=) 6: OxJM60qRQUOtdqYrv27xs3_kv9k.roa (hash: w3ZIUcbiJQn/X+ANNYduQprQtRgqv43tl64iIBJ+uVs=) 7: PujNlKftYzeQaE0MnZm0EPh4AFY.roa (hash: KOYoiHizuILiOcTb5DR0niku+PQ57DIf210w8rlbdQY=) 8: PyHODj5n0DejAoWrQZBIRXaXo6Y.roa (hash: 3ofBNW8DPxuvHoS9tkTr0YH1zUrrGyXEWYQ/aOGrjNI=) 9: RTPP9X2zvoR_qL8VtqZr6WEHKzw.roa (hash: bz39/MS5H8r1qd18PCFQ3+2kRu1MJoP1Vd1Xyr//BW0=) 10: WGYchnyCAbqQd8pzwZhRwcjvgv8.roa (hash: I9YjzWZ/pqf8yScr+6TqbtawBHd4EYuPwRC5bUBqVQw=) 11: Wz0IiveJRR3iZ_TFadI3Bt6mJJE.roa (hash: CImcnKPxhqg5cF+ps6Yupe+fhV0VE9C6rzuLTV7FS3Q=) 12: X2QsnfxAM9ScjVh_AzAztNDaXJg.roa (hash: L4YEdLYOkjYPPZMBRJDRYkJkVBQq0athDIG3eYPShmM=) 13: Z_IuqEKKfXuEOIP93u24e6BLk0E.roa (hash: 9YG/wmkjQ+naLweN0fWYFNb6KTTbRHlNigN8yWNOBNk=) 14: bjs_zJFuHzjoxK2NthqbKcV1s-8.roa (hash: Eg2O923oFj6n/iosVJD0SXVlsUTZEP0y964Jkw4vJR0=) 15: gho_IfsMKU1tSlKbLx29S9ERm9c.crl (hash: E/OEJgRpZdukrI/xYYidSDxAO5B4b7GQw/KM2Z2m//Q=) 16: kELckgtwVoSvJeEmqDzRwJ_w8M4.roa (hash: ryrV6l1reh0IiB1vVcw5FXf5SQ2NaFZbF4Pl/NJCuQ4=) 17: u26dzWx1WsuAyPhRE3IG1GMmdJc.roa (hash: gEHPHjFqESUZPon7FHlszrJPYiDLqkhRmgKIOhvsfGY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/edc855-f2bc-4e9c-8c0c-b6f2ac86ef27/1/gho_IfsMKU1tSlKbLx29S9ERm9c.crl rsync://rpki.ripe.net/repository/DEFAULT/12/edc855-f2bc-4e9c-8c0c-b6f2ac86ef27/1/gho_IfsMKU1tSlKbLx29S9ERm9c.mft rsync://rpki.ripe.net/repository/DEFAULT/gho_IfsMKU1tSlKbLx29S9ERm9c.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 31 Oct 2026 05:00:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a1:8b:2e:73:06:23:61:28:f1:85:20:80:c9:70:c7:e1:8a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=821a3f21fb0c294d6d4a529b2f1dbd4bd1119bd7 Validity Not Before: Oct 30 05:00:39 2026 GMT Not After : Oct 31 05:00:39 2026 GMT Subject: CN=2c0001e1576b0beb84fdf1e6fcc3abb49a3415f1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f5:7f:dc:01:e8:ea:1a:b3:4f:22:cf:8c:c9:c2: c9:4d:e3:af:0d:d4:ae:5a:3f:da:b8:46:e3:69:22: 45:af:6e:c3:fd:10:e7:e2:83:23:f3:d9:e3:2f:33: 4f:ab:8e:75:4e:d4:05:b1:a0:e6:b1:04:82:0c:5e: 33:3a:ba:a1:be:ea:6a:3a:b1:fd:33:e3:61:97:6a: 01:74:73:d8:c5:6c:41:85:1e:d4:7f:52:a9:05:ec: 60:6b:38:69:a6:44:82:bf:d5:15:57:fa:42:31:7e: 9d:d9:fb:b1:da:9b:75:39:e7:4f:bb:c5:c3:b2:ba: ec:8f:92:33:64:79:1c:26:e1:5f:be:a0:7e:c6:a1: f4:d1:77:b5:3b:13:72:70:ce:16:89:3c:63:da:34: e2:66:f3:77:03:89:60:94:bc:d7:3d:68:18:c6:5b: 44:4b:cf:7f:5c:72:04:3d:df:64:82:71:79:ca:68: ac:a4:3f:af:f6:dc:3c:82:ac:2d:99:23:de:bc:c6: 11:8d:34:1e:f6:67:57:47:64:96:84:ae:3c:e2:87: 9b:ea:d6:f5:f0:49:3f:a9:1d:99:3f:a5:db:27:d7: 34:00:d0:78:a6:d0:a9:0e:ac:36:dd:f8:e0:e0:b5: 5b:60:88:05:71:b7:01:d5:23:87:76:73:cd:e0:8a: 63:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:00:01:E1:57:6B:0B:EB:84:FD:F1:E6:FC:C3:AB:B4:9A:34:15:F1 X509v3 Authority Key Identifier: keyid:82:1A:3F:21:FB:0C:29:4D:6D:4A:52:9B:2F:1D:BD:4B:D1:11:9B:D7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gho_IfsMKU1tSlKbLx29S9ERm9c.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/edc855-f2bc-4e9c-8c0c-b6f2ac86ef27/1/gho_IfsMKU1tSlKbLx29S9ERm9c.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/12/edc855-f2bc-4e9c-8c0c-b6f2ac86ef27/1/gho_IfsMKU1tSlKbLx29S9ERm9c.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 67:47:ff:2f:4a:e8:7b:1c:6d:1f:d5:0a:ec:cd:3d:fc:47:29: c5:ef:74:94:53:ef:5a:78:90:41:f6:21:d1:ce:f1:04:84:91: 45:2e:73:8d:46:69:5f:3d:a5:04:84:06:9c:42:d4:80:7c:34: 10:dd:f2:d5:e6:fa:ba:b8:6e:7a:46:0b:f7:d0:91:8b:b6:63: 85:0c:14:6b:2f:9e:08:1b:91:a4:e1:33:fa:46:46:b5:c2:0c: 9d:3b:a9:cb:a7:19:b9:24:48:3d:cb:2a:63:db:a2:7d:11:13: 42:31:b8:82:10:7b:4d:08:b7:ab:fe:ad:45:ba:a9:18:4b:01: 50:c8:4f:11:47:76:37:7d:8a:9c:ac:87:77:ec:11:8a:eb:5a: d7:c4:91:c1:c8:18:dd:a6:15:ff:6b:a6:cf:92:4d:f0:5b:3d: 02:62:f0:50:4a:ee:5a:35:55:1d:b2:9c:6c:41:60:fe:c0:58: b4:c6:03:d7:ad:93:f0:f8:c0:08:80:2c:4e:fd:0a:6a:79:09: 52:1e:ff:80:a1:fb:f3:79:9d:1d:4b:60:8a:a6:fd:3b:bd:01: 05:1c:05:09:52:84:8b:86:1a:df:27:0c:95:33:a9:ad:73:50: 80:62:ce:46:e8:1c:a2:5c:c8:93:b9:c7:83:52:5c:fe:f3:22: de:a5:2f:0b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaGLLnMGI2Eo8YUggMlwx+GKMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDgyMWEzZjIxZmIwYzI5NGQ2ZDRhNTI5YjJmMWRiZDRiZDEx MTliZDcwHhcNMjYxMDMwMDUwMDM5WhcNMjYxMDMxMDUwMDM5WjAzMTEwLwYDVQQD EygyYzAwMDFlMTU3NmIwYmViODRmZGYxZTZmY2MzYWJiNDlhMzQxNWYxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9X/cAejqGrNPIs+MycLJTeOvDdSu Wj/auEbjaSJFr27D/RDn4oMj89njLzNPq451TtQFsaDmsQSCDF4zOrqhvupqOrH9 M+Nhl2oBdHPYxWxBhR7Uf1KpBexgazhppkSCv9UVV/pCMX6d2fux2pt1OedPu8XD srrsj5IzZHkcJuFfvqB+xqH00Xe1OxNycM4WiTxj2jTiZvN3A4lglLzXPWgYxltE S89/XHIEPd9kgnF5ymispD+v9tw8gqwtmSPevMYRjTQe9mdXR2SWhK484oeb6tb1 8Ek/qR2ZP6XbJ9c0ANB4ptCpDqw23fjg4LVbYIgFcbcB1SOHdnPN4IpjsQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCwAAeFXawvrhP3x5vzDq7SaNBXxMB8GA1UdIwQY MBaAFIIaPyH7DClNbUpSmy8dvUvREZvXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZ2hvX0lmc01LVTF0U2xLYkx4MjlTOUVSbTljLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMi9lZGM4NTUtZjJiYy00ZTljLThjMGMt YjZmMmFjODZlZjI3LzEvZ2hvX0lmc01LVTF0U2xLYkx4MjlTOUVSbTljLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMi9lZGM4NTUtZjJiYy00ZTljLThjMGMtYjZmMmFjODZlZjI3 LzEvZ2hvX0lmc01LVTF0U2xLYkx4MjlTOUVSbTljLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZ0f/L0ro exxtH9UK7M09/Ecpxe90lFPvWniQQfYh0c7xBISRRS5zjUZpXz2lBIQGnELUgHw0 EN3y1eb6urhuekYL99CRi7ZjhQwUay+eCBuRpOEz+kZGtcIMnTupy6cZuSRIPcsq Y9uifRETQjG4ghB7TQi3q/6tRbqpGEsBUMhPEUd2N32KnKyHd+wRiuta18SRwcgY 3aYV/2umz5JN8Fs9AmLwUEruWjVVHbKcbEFg/sBYtMYD162T8PjACIAsTv0KankJ Uh7/gKH783mdHUtgiqb9O70BBRwFCVKEi4Ya3ycMlTOprXNQgGLORugcolzIk7nH g1Jc/vMi3qUvCw== -----END CERTIFICATE-----Generated at Fri Oct 30 16:28:07 2026 by rpki-client