$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/edc855-f2bc-4e9c-8c0c-b6f2ac86ef27/1/gho_IfsMKU1tSlKbLx29S9ERm9c.mft File: gho_IfsMKU1tSlKbLx29S9ERm9c.mft (raw, json) Hash identifier: 82sDgWgVAH11NrJwfZfTaWtrELell6jbbqVeRi9zvr0= Subject key identifier: CE:82:4C:15:EA:4B:1C:51:71:CD:5E:D4:62:28:2C:91:E3:64:07:F8 Authority key identifier: 82:1A:3F:21:FB:0C:29:4D:6D:4A:52:9B:2F:1D:BD:4B:D1:11:9B:D7 Certificate issuer: /CN=821a3f21fb0c294d6d4a529b2f1dbd4bd1119bd7 Certificate serial: 019E49C4AD4AB8237A6123B77B669BAB75D0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gho_IfsMKU1tSlKbLx29S9ERm9c.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/edc855-f2bc-4e9c-8c0c-b6f2ac86ef27/1/gho_IfsMKU1tSlKbLx29S9ERm9c.mft Manifest number: 1381 Signing time: Thu 21 May 2026 09:01:26 +0000 Manifest this update: Thu 21 May 2026 09:01:26 +0000 Manifest next update: Fri 22 May 2026 09:01:26 +0000 Files and hashes: 1: 2FTZk29N4ByQY45BtJSQSIVpVRM.roa (hash: rAVovOm/njZtMMmGMfPRxJdixQBe2en8/pj68uz5a98=) 2: 94DmWvO75aSCrTILT7xO5QfIZ4Q.roa (hash: yowEVWaH5JasWlMxUT7Mgz1/3iSP8rVz/KjlsGeBATs=) 3: Lw_o47E9qYaZtJPZjp5m1M1e0_o.roa (hash: TnHpGib6gDq3lP3ubauOs2iA7D/xB8DKvaZF7GPTkuk=) 4: MRCItQ1B9948OVdVK1kL96AGPQI.roa (hash: ZQgpMxwvj3QAdwytn7kSRtX4MaK4Pcv8MlZ4Lzpi3Pg=) 5: OFjegJjxvcb4sj9nFgT2lfhHX4s.roa (hash: IYubfyClKzPMzSFo0EthrRHOvnb4H46ku4bTbgAoW7k=) 6: OQ-6VTdp1vw9GrjNLFmvI9JYOrs.roa (hash: ZPmtBIJ2La5bnUm+sApv+AeoWDVjiZhyYSZEHB1jKmo=) 7: OxJM60qRQUOtdqYrv27xs3_kv9k.roa (hash: w3ZIUcbiJQn/X+ANNYduQprQtRgqv43tl64iIBJ+uVs=) 8: PyHODj5n0DejAoWrQZBIRXaXo6Y.roa (hash: 3ofBNW8DPxuvHoS9tkTr0YH1zUrrGyXEWYQ/aOGrjNI=) 9: RTPP9X2zvoR_qL8VtqZr6WEHKzw.roa (hash: bz39/MS5H8r1qd18PCFQ3+2kRu1MJoP1Vd1Xyr//BW0=) 10: WGYchnyCAbqQd8pzwZhRwcjvgv8.roa (hash: I9YjzWZ/pqf8yScr+6TqbtawBHd4EYuPwRC5bUBqVQw=) 11: Wz0IiveJRR3iZ_TFadI3Bt6mJJE.roa (hash: CImcnKPxhqg5cF+ps6Yupe+fhV0VE9C6rzuLTV7FS3Q=) 12: X2QsnfxAM9ScjVh_AzAztNDaXJg.roa (hash: L4YEdLYOkjYPPZMBRJDRYkJkVBQq0athDIG3eYPShmM=) 13: Z_IuqEKKfXuEOIP93u24e6BLk0E.roa (hash: 9YG/wmkjQ+naLweN0fWYFNb6KTTbRHlNigN8yWNOBNk=) 14: gho_IfsMKU1tSlKbLx29S9ERm9c.crl (hash: 3sxJ0sgycpaxeVkLh1HNVu5BuT4LXBpFfKIBuW26aBU=) 15: htqKUhJyQNt1qA3G44rlxCxq60M.roa (hash: id0wxN4WW72w7KuwB5zxXQt9wJQv2b/0iQarjkgrnuM=) 16: t4R25ZXPVStjauKJN0GTtODr3yU.roa (hash: g5h7UJb9yZQYOvckJX3+K/kTtGb30JhlTLu3Ss9IriI=) 17: u26dzWx1WsuAyPhRE3IG1GMmdJc.roa (hash: gEHPHjFqESUZPon7FHlszrJPYiDLqkhRmgKIOhvsfGY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/edc855-f2bc-4e9c-8c0c-b6f2ac86ef27/1/gho_IfsMKU1tSlKbLx29S9ERm9c.crl rsync://rpki.ripe.net/repository/DEFAULT/12/edc855-f2bc-4e9c-8c0c-b6f2ac86ef27/1/gho_IfsMKU1tSlKbLx29S9ERm9c.mft rsync://rpki.ripe.net/repository/DEFAULT/gho_IfsMKU1tSlKbLx29S9ERm9c.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 22 May 2026 09:01:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9e:49:c4:ad:4a:b8:23:7a:61:23:b7:7b:66:9b:ab:75:d0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=821a3f21fb0c294d6d4a529b2f1dbd4bd1119bd7 Validity Not Before: May 21 09:01:26 2026 GMT Not After : May 22 09:01:26 2026 GMT Subject: CN=ce824c15ea4b1c5171cd5ed462282c91e36407f8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:ae:70:a6:d6:45:23:23:7c:51:33:a2:55:e6: 78:a4:3f:11:8f:9e:d5:9e:38:ad:49:d7:ac:f6:b3: 8d:6a:e7:55:57:36:31:cf:f5:87:1f:16:10:66:69: 61:2c:be:83:65:81:bb:aa:8f:06:33:03:27:9c:9e: 88:2b:00:ec:2e:d8:a9:42:1e:b7:eb:ef:37:54:f3: 25:2b:f6:e8:45:34:7e:55:e1:9c:44:c7:b5:72:91: 81:86:58:73:42:a0:00:5b:62:70:9a:1d:3f:3b:27: 0d:a0:ef:c4:00:ee:70:dd:96:13:46:e9:0a:16:c8: 03:aa:aa:b1:de:d4:c9:5a:88:6d:de:a2:41:56:d6: 9f:ab:21:48:9f:63:ed:4d:ac:47:3a:93:98:f9:af: 59:71:de:cc:7e:74:72:2e:8f:cd:32:38:ec:bc:06: 78:a6:2f:f9:2a:5b:ae:32:74:f0:8c:5e:46:97:61: ee:de:c1:ee:44:32:d3:54:f0:4b:69:c5:86:11:76: 3b:12:5a:a2:52:ea:26:5d:f3:6a:1e:8d:38:51:0b: 4a:b3:55:66:ec:bb:3b:9d:69:12:5a:76:43:8d:8f: 82:34:74:b4:80:65:b2:83:a6:4d:44:a5:1a:d3:39: ed:6f:48:1a:1b:b0:6a:fc:8b:f2:39:f9:b6:5e:49: 48:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:82:4C:15:EA:4B:1C:51:71:CD:5E:D4:62:28:2C:91:E3:64:07:F8 X509v3 Authority Key Identifier: keyid:82:1A:3F:21:FB:0C:29:4D:6D:4A:52:9B:2F:1D:BD:4B:D1:11:9B:D7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gho_IfsMKU1tSlKbLx29S9ERm9c.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/edc855-f2bc-4e9c-8c0c-b6f2ac86ef27/1/gho_IfsMKU1tSlKbLx29S9ERm9c.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/12/edc855-f2bc-4e9c-8c0c-b6f2ac86ef27/1/gho_IfsMKU1tSlKbLx29S9ERm9c.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3a:ab:8b:4a:d1:5e:af:f8:bf:41:c3:c2:4a:bd:32:67:4b:f3: 55:e9:c7:3b:37:47:60:d7:99:31:6e:a0:59:bd:ac:4f:53:ac: 00:67:98:f5:8f:43:4b:ef:4f:94:b6:6d:f9:1e:a2:37:75:88: dc:36:46:a8:93:b5:19:82:52:e8:c5:d1:56:6f:d4:89:a2:70: b8:f7:36:3e:e9:aa:33:71:77:e9:a1:23:45:3a:87:7f:de:58: 4e:59:c0:36:df:0e:ed:d9:f4:c8:12:17:c3:ac:28:a1:5f:b4: ac:c2:12:49:41:34:87:ff:1c:46:7f:d1:f0:d2:33:93:5d:65: 9a:36:b1:87:35:b7:d0:3b:f0:dd:03:e9:97:20:a3:ea:89:55: b7:30:34:0a:c8:4b:96:39:aa:05:c7:54:54:75:8b:1d:ff:b5: 0a:a6:4e:a2:44:a8:1d:b1:5e:d8:f4:88:03:3b:86:be:d8:36: cd:e9:7f:96:f4:4c:b7:38:4c:5b:9d:18:0e:25:c0:d1:bb:f5: bf:37:bc:87:9e:f6:f4:38:12:b1:c1:4c:2e:36:7c:25:50:ee: 64:02:50:37:51:5e:2a:48:95:d9:fe:cf:18:d3:c1:ce:66:ce: b9:0b:50:63:33:df:f6:1f:43:db:23:d6:c7:1c:2c:46:96:23: 1a:a3:77:42 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ5JxK1KuCN6YSO3e2abq3XQMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDgyMWEzZjIxZmIwYzI5NGQ2ZDRhNTI5YjJmMWRiZDRiZDEx MTliZDcwHhcNMjYwNTIxMDkwMTI2WhcNMjYwNTIyMDkwMTI2WjAzMTEwLwYDVQQD EyhjZTgyNGMxNWVhNGIxYzUxNzFjZDVlZDQ2MjI4MmM5MWUzNjQwN2Y4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArK5wptZFIyN8UTOiVeZ4pD8Rj57V njitSdes9rONaudVVzYxz/WHHxYQZmlhLL6DZYG7qo8GMwMnnJ6IKwDsLtipQh63 6+83VPMlK/boRTR+VeGcRMe1cpGBhlhzQqAAW2Jwmh0/OycNoO/EAO5w3ZYTRukK FsgDqqqx3tTJWoht3qJBVtafqyFIn2PtTaxHOpOY+a9Zcd7MfnRyLo/NMjjsvAZ4 pi/5KluuMnTwjF5Gl2Hu3sHuRDLTVPBLacWGEXY7ElqiUuomXfNqHo04UQtKs1Vm 7Ls7nWkSWnZDjY+CNHS0gGWyg6ZNRKUa0zntb0gaG7Bq/IvyOfm2XklIxQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFM6CTBXqSxxRcc1e1GIoLJHjZAf4MB8GA1UdIwQY MBaAFIIaPyH7DClNbUpSmy8dvUvREZvXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZ2hvX0lmc01LVTF0U2xLYkx4MjlTOUVSbTljLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMi9lZGM4NTUtZjJiYy00ZTljLThjMGMt YjZmMmFjODZlZjI3LzEvZ2hvX0lmc01LVTF0U2xLYkx4MjlTOUVSbTljLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMi9lZGM4NTUtZjJiYy00ZTljLThjMGMtYjZmMmFjODZlZjI3 LzEvZ2hvX0lmc01LVTF0U2xLYkx4MjlTOUVSbTljLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOquLStFe r/i/QcPCSr0yZ0vzVenHOzdHYNeZMW6gWb2sT1OsAGeY9Y9DS+9PlLZt+R6iN3WI 3DZGqJO1GYJS6MXRVm/UiaJwuPc2PumqM3F36aEjRTqHf95YTlnANt8O7dn0yBIX w6wooV+0rMISSUE0h/8cRn/R8NIzk11lmjaxhzW30Dvw3QPplyCj6olVtzA0CshL ljmqBcdUVHWLHf+1CqZOokSoHbFe2PSIAzuGvtg2zel/lvRMtzhMW50YDiXA0bv1 vze8h5729DgSscFMLjZ8JVDuZAJQN1FeKkiV2f7PGNPBzmbOuQtQYzPf9h9D2yPW xxwsRpYjGqN3Qg== -----END CERTIFICATE-----Generated at Thu May 21 17:19:27 2026 by rpki-client