$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/12/edc855-f2bc-4e9c-8c0c-b6f2ac86ef27/1/gho_IfsMKU1tSlKbLx29S9ERm9c.mft File: gho_IfsMKU1tSlKbLx29S9ERm9c.mft (raw, json) Hash identifier: uOUngDaKMuWf4cBTuQOXq1OCzeNxgf8u8nnL4/802bE= Subject key identifier: 12:78:77:B7:AB:CF:0B:CC:70:E1:ED:3C:B3:2E:0D:07:2B:26:70:2E Authority key identifier: 82:1A:3F:21:FB:0C:29:4D:6D:4A:52:9B:2F:1D:BD:4B:D1:11:9B:D7 Certificate issuer: /CN=821a3f21fb0c294d6d4a529b2f1dbd4bd1119bd7 Certificate serial: 01A109CB09817F7E9B589E092EE1A956850D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gho_IfsMKU1tSlKbLx29S9ERm9c.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/edc855-f2bc-4e9c-8c0c-b6f2ac86ef27/1/gho_IfsMKU1tSlKbLx29S9ERm9c.mft Manifest number: 14F0 Signing time: Mon 05 Oct 2026 02:01:03 +0000 Manifest this update: Mon 05 Oct 2026 02:01:03 +0000 Manifest next update: Tue 06 Oct 2026 02:01:03 +0000 Files and hashes: 1: 94DmWvO75aSCrTILT7xO5QfIZ4Q.roa (hash: yowEVWaH5JasWlMxUT7Mgz1/3iSP8rVz/KjlsGeBATs=) 2: I0ycopSi6_q86tsS_2ZsGMaSE7E.roa (hash: X5k67tgIigX44haykK5HKygDUVpwt1sPzwvIgtRhgUo=) 3: Lw_o47E9qYaZtJPZjp5m1M1e0_o.roa (hash: TnHpGib6gDq3lP3ubauOs2iA7D/xB8DKvaZF7GPTkuk=) 4: MRCItQ1B9948OVdVK1kL96AGPQI.roa (hash: ZQgpMxwvj3QAdwytn7kSRtX4MaK4Pcv8MlZ4Lzpi3Pg=) 5: OQ-6VTdp1vw9GrjNLFmvI9JYOrs.roa (hash: ZPmtBIJ2La5bnUm+sApv+AeoWDVjiZhyYSZEHB1jKmo=) 6: OxJM60qRQUOtdqYrv27xs3_kv9k.roa (hash: w3ZIUcbiJQn/X+ANNYduQprQtRgqv43tl64iIBJ+uVs=) 7: PujNlKftYzeQaE0MnZm0EPh4AFY.roa (hash: KOYoiHizuILiOcTb5DR0niku+PQ57DIf210w8rlbdQY=) 8: PyHODj5n0DejAoWrQZBIRXaXo6Y.roa (hash: 3ofBNW8DPxuvHoS9tkTr0YH1zUrrGyXEWYQ/aOGrjNI=) 9: RTPP9X2zvoR_qL8VtqZr6WEHKzw.roa (hash: bz39/MS5H8r1qd18PCFQ3+2kRu1MJoP1Vd1Xyr//BW0=) 10: WGYchnyCAbqQd8pzwZhRwcjvgv8.roa (hash: I9YjzWZ/pqf8yScr+6TqbtawBHd4EYuPwRC5bUBqVQw=) 11: Wz0IiveJRR3iZ_TFadI3Bt6mJJE.roa (hash: CImcnKPxhqg5cF+ps6Yupe+fhV0VE9C6rzuLTV7FS3Q=) 12: X2QsnfxAM9ScjVh_AzAztNDaXJg.roa (hash: L4YEdLYOkjYPPZMBRJDRYkJkVBQq0athDIG3eYPShmM=) 13: Z_IuqEKKfXuEOIP93u24e6BLk0E.roa (hash: 9YG/wmkjQ+naLweN0fWYFNb6KTTbRHlNigN8yWNOBNk=) 14: bjs_zJFuHzjoxK2NthqbKcV1s-8.roa (hash: Eg2O923oFj6n/iosVJD0SXVlsUTZEP0y964Jkw4vJR0=) 15: gho_IfsMKU1tSlKbLx29S9ERm9c.crl (hash: 25gvtjzPUky8o0QtP5NIfnJuhLdiFhTROppKvhEDoHg=) 16: kELckgtwVoSvJeEmqDzRwJ_w8M4.roa (hash: ryrV6l1reh0IiB1vVcw5FXf5SQ2NaFZbF4Pl/NJCuQ4=) 17: u26dzWx1WsuAyPhRE3IG1GMmdJc.roa (hash: gEHPHjFqESUZPon7FHlszrJPYiDLqkhRmgKIOhvsfGY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/edc855-f2bc-4e9c-8c0c-b6f2ac86ef27/1/gho_IfsMKU1tSlKbLx29S9ERm9c.crl rsync://rpki.ripe.net/repository/DEFAULT/12/edc855-f2bc-4e9c-8c0c-b6f2ac86ef27/1/gho_IfsMKU1tSlKbLx29S9ERm9c.mft rsync://rpki.ripe.net/repository/DEFAULT/gho_IfsMKU1tSlKbLx29S9ERm9c.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 06 Oct 2026 02:01:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a1:09:cb:09:81:7f:7e:9b:58:9e:09:2e:e1:a9:56:85:0d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=821a3f21fb0c294d6d4a529b2f1dbd4bd1119bd7 Validity Not Before: Oct 5 02:01:03 2026 GMT Not After : Oct 6 02:01:03 2026 GMT Subject: CN=127877b7abcf0bcc70e1ed3cb32e0d072b26702e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:b5:0c:f5:a4:e9:2f:14:8b:cb:6f:b2:e7:ec: 3f:46:a0:70:38:c9:ff:58:22:a6:73:3f:80:2b:4f: 3b:a4:66:69:1a:30:7b:66:76:33:e5:d0:0c:1a:37: 6d:35:29:00:7b:75:5b:0c:3d:03:6b:6d:ee:65:14: 7c:0d:91:84:37:f2:22:93:6a:23:c1:d8:69:cb:0a: ff:72:bb:e8:91:85:82:61:6e:99:31:c2:27:27:55: fa:18:79:c6:fb:35:f9:e8:17:9b:51:42:3c:8c:cf: bb:81:4d:c7:38:5b:6b:b0:ad:a2:27:1c:a3:b6:b1: ea:c6:e5:33:c8:f9:61:2f:d4:b4:3d:4c:1f:9d:f0: 91:40:00:3b:3e:68:54:fc:a6:92:4b:75:94:cc:58: 7e:19:c9:72:8f:ed:df:f4:f6:d2:0d:34:00:e0:68: 3b:42:96:fe:f3:90:ea:d9:eb:ac:14:6d:2d:0f:70: 4a:0d:c4:17:ae:43:6f:33:bb:76:22:10:e8:15:6d: 32:4c:13:32:a2:aa:09:5e:89:b1:5d:e3:b4:77:f6: 6c:13:88:7f:53:07:7c:28:9e:19:34:e9:f8:2c:d1: e3:65:6f:6e:68:93:ea:56:f4:75:01:fc:9c:d6:6b: 0e:88:6c:92:88:80:ce:a9:71:ca:88:46:e9:2b:29: e2:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:78:77:B7:AB:CF:0B:CC:70:E1:ED:3C:B3:2E:0D:07:2B:26:70:2E X509v3 Authority Key Identifier: keyid:82:1A:3F:21:FB:0C:29:4D:6D:4A:52:9B:2F:1D:BD:4B:D1:11:9B:D7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gho_IfsMKU1tSlKbLx29S9ERm9c.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/edc855-f2bc-4e9c-8c0c-b6f2ac86ef27/1/gho_IfsMKU1tSlKbLx29S9ERm9c.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/12/edc855-f2bc-4e9c-8c0c-b6f2ac86ef27/1/gho_IfsMKU1tSlKbLx29S9ERm9c.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2d:ff:8a:78:2a:c0:c2:11:52:f6:b4:ff:c1:a7:99:94:80:05: 2a:d6:0c:81:ee:fb:02:f7:4f:f4:5b:98:ff:58:d2:25:71:63: 93:47:a1:b5:62:4a:91:62:d4:99:d6:00:45:f7:bf:29:08:17: 6f:60:4f:72:8a:24:9b:c5:0c:be:cd:cd:82:ce:48:e0:44:fe: a3:5c:9f:ff:5a:f9:9c:9a:86:6c:53:86:93:b2:87:2c:a6:73: 7c:61:7a:96:35:52:ab:d8:c2:bd:bd:ba:71:0a:1e:c6:f0:ca: 77:68:ff:30:da:94:0e:77:81:e2:38:02:db:03:8a:cb:35:86: a7:8d:4d:63:c5:b0:0a:a0:e2:8f:a6:be:e9:ce:9e:a4:8b:5d: 59:b8:a2:81:0e:c8:37:df:f3:aa:9b:ec:29:33:8e:87:35:92: 43:f2:96:74:79:36:fa:a7:ef:9b:b6:c4:97:25:5b:87:f7:4f: 4c:1b:47:75:ed:58:9d:7e:2b:f0:8d:23:95:b4:9d:ad:88:f8: 52:41:a6:33:bc:1c:ec:80:ef:23:29:3e:a7:03:06:7b:b8:d5: 41:c7:74:51:42:b9:a4:e1:38:b8:db:9c:d5:31:12:5d:9e:63: d6:a3:1c:bc:53:cd:0a:69:ce:c3:87:2f:8e:81:f6:3a:91:89: 4b:92:f4:bf -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaEJywmBf36bWJ4JLuGpVoUNMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDgyMWEzZjIxZmIwYzI5NGQ2ZDRhNTI5YjJmMWRiZDRiZDEx MTliZDcwHhcNMjYxMDA1MDIwMTAzWhcNMjYxMDA2MDIwMTAzWjAzMTEwLwYDVQQD EygxMjc4NzdiN2FiY2YwYmNjNzBlMWVkM2NiMzJlMGQwNzJiMjY3MDJlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3bUM9aTpLxSLy2+y5+w/RqBwOMn/ WCKmcz+AK087pGZpGjB7ZnYz5dAMGjdtNSkAe3VbDD0Da23uZRR8DZGEN/Iik2oj wdhpywr/crvokYWCYW6ZMcInJ1X6GHnG+zX56BebUUI8jM+7gU3HOFtrsK2iJxyj trHqxuUzyPlhL9S0PUwfnfCRQAA7PmhU/KaSS3WUzFh+Gclyj+3f9PbSDTQA4Gg7 Qpb+85Dq2eusFG0tD3BKDcQXrkNvM7t2IhDoFW0yTBMyoqoJXomxXeO0d/ZsE4h/ Uwd8KJ4ZNOn4LNHjZW9uaJPqVvR1Afyc1msOiGySiIDOqXHKiEbpKyni7QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBJ4d7erzwvMcOHtPLMuDQcrJnAuMB8GA1UdIwQY MBaAFIIaPyH7DClNbUpSmy8dvUvREZvXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZ2hvX0lmc01LVTF0U2xLYkx4MjlTOUVSbTljLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMi9lZGM4NTUtZjJiYy00ZTljLThjMGMt YjZmMmFjODZlZjI3LzEvZ2hvX0lmc01LVTF0U2xLYkx4MjlTOUVSbTljLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMi9lZGM4NTUtZjJiYy00ZTljLThjMGMtYjZmMmFjODZlZjI3 LzEvZ2hvX0lmc01LVTF0U2xLYkx4MjlTOUVSbTljLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALf+KeCrA whFS9rT/waeZlIAFKtYMge77AvdP9FuY/1jSJXFjk0ehtWJKkWLUmdYARfe/KQgX b2BPcookm8UMvs3Ngs5I4ET+o1yf/1r5nJqGbFOGk7KHLKZzfGF6ljVSq9jCvb26 cQoexvDKd2j/MNqUDneB4jgC2wOKyzWGp41NY8WwCqDij6a+6c6epItdWbiigQ7I N9/zqpvsKTOOhzWSQ/KWdHk2+qfvm7bElyVbh/dPTBtHde1YnX4r8I0jlbSdrYj4 UkGmM7wc7IDvIyk+pwMGe7jVQcd0UUK5pOE4uNuc1TESXZ5j1qMcvFPNCmnOw4cv joH2OpGJS5L0vw== -----END CERTIFICATE-----Generated at Mon Oct 5 13:25:42 2026 by rpki-client