$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/edc855-f2bc-4e9c-8c0c-b6f2ac86ef27/1/gho_IfsMKU1tSlKbLx29S9ERm9c.mft File: gho_IfsMKU1tSlKbLx29S9ERm9c.mft (raw, json) Hash identifier: OaTvaVM726PNSGYYDbxbfND9lp5T4tKWNYCCJLXT1d0= Subject key identifier: F3:C9:9E:62:08:D5:72:4F:25:CF:95:49:BC:1D:71:9C:C8:3B:D1:7A Authority key identifier: 82:1A:3F:21:FB:0C:29:4D:6D:4A:52:9B:2F:1D:BD:4B:D1:11:9B:D7 Certificate issuer: /CN=821a3f21fb0c294d6d4a529b2f1dbd4bd1119bd7 Certificate serial: 019CC486113867A627BB897DE94E79DAD363 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gho_IfsMKU1tSlKbLx29S9ERm9c.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/edc855-f2bc-4e9c-8c0c-b6f2ac86ef27/1/gho_IfsMKU1tSlKbLx29S9ERm9c.mft Manifest number: 12B6 Signing time: Fri 06 Mar 2026 19:00:46 +0000 Manifest this update: Fri 06 Mar 2026 19:00:46 +0000 Manifest next update: Sat 07 Mar 2026 19:00:46 +0000 Files and hashes: 1: 2FTZk29N4ByQY45BtJSQSIVpVRM.roa (hash: rAVovOm/njZtMMmGMfPRxJdixQBe2en8/pj68uz5a98=) 2: 6r3q3z9OFjrJ9qoUTQKhOroMbaM.roa (hash: 29mycutC5foPo3U8nHm9mrCTYw4984xkZIx+WiI1F9M=) 3: 94DmWvO75aSCrTILT7xO5QfIZ4Q.roa (hash: yowEVWaH5JasWlMxUT7Mgz1/3iSP8rVz/KjlsGeBATs=) 4: Lw_o47E9qYaZtJPZjp5m1M1e0_o.roa (hash: TnHpGib6gDq3lP3ubauOs2iA7D/xB8DKvaZF7GPTkuk=) 5: MRCItQ1B9948OVdVK1kL96AGPQI.roa (hash: ZQgpMxwvj3QAdwytn7kSRtX4MaK4Pcv8MlZ4Lzpi3Pg=) 6: OFjegJjxvcb4sj9nFgT2lfhHX4s.roa (hash: IYubfyClKzPMzSFo0EthrRHOvnb4H46ku4bTbgAoW7k=) 7: OKCXW7_MWWto3GWe7wi0avKoJxY.roa (hash: WqcSKwFHiTej52k827avLCbdmV9f2szfzxuzHTMps/4=) 8: OQ-6VTdp1vw9GrjNLFmvI9JYOrs.roa (hash: ZPmtBIJ2La5bnUm+sApv+AeoWDVjiZhyYSZEHB1jKmo=) 9: OxJM60qRQUOtdqYrv27xs3_kv9k.roa (hash: w3ZIUcbiJQn/X+ANNYduQprQtRgqv43tl64iIBJ+uVs=) 10: PyHODj5n0DejAoWrQZBIRXaXo6Y.roa (hash: 3ofBNW8DPxuvHoS9tkTr0YH1zUrrGyXEWYQ/aOGrjNI=) 11: WGYchnyCAbqQd8pzwZhRwcjvgv8.roa (hash: I9YjzWZ/pqf8yScr+6TqbtawBHd4EYuPwRC5bUBqVQw=) 12: Wz0IiveJRR3iZ_TFadI3Bt6mJJE.roa (hash: CImcnKPxhqg5cF+ps6Yupe+fhV0VE9C6rzuLTV7FS3Q=) 13: X2QsnfxAM9ScjVh_AzAztNDaXJg.roa (hash: L4YEdLYOkjYPPZMBRJDRYkJkVBQq0athDIG3eYPShmM=) 14: Z_IuqEKKfXuEOIP93u24e6BLk0E.roa (hash: 9YG/wmkjQ+naLweN0fWYFNb6KTTbRHlNigN8yWNOBNk=) 15: gho_IfsMKU1tSlKbLx29S9ERm9c.crl (hash: fdeMs+qW0uZj8fY8KreasVgMUauNI0MGU/2MdDtjnGM=) 16: t4R25ZXPVStjauKJN0GTtODr3yU.roa (hash: g5h7UJb9yZQYOvckJX3+K/kTtGb30JhlTLu3Ss9IriI=) 17: u26dzWx1WsuAyPhRE3IG1GMmdJc.roa (hash: gEHPHjFqESUZPon7FHlszrJPYiDLqkhRmgKIOhvsfGY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/edc855-f2bc-4e9c-8c0c-b6f2ac86ef27/1/gho_IfsMKU1tSlKbLx29S9ERm9c.crl rsync://rpki.ripe.net/repository/DEFAULT/12/edc855-f2bc-4e9c-8c0c-b6f2ac86ef27/1/gho_IfsMKU1tSlKbLx29S9ERm9c.mft rsync://rpki.ripe.net/repository/DEFAULT/gho_IfsMKU1tSlKbLx29S9ERm9c.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 07 Mar 2026 16:52:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:c4:86:11:38:67:a6:27:bb:89:7d:e9:4e:79:da:d3:63 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=821a3f21fb0c294d6d4a529b2f1dbd4bd1119bd7 Validity Not Before: Mar 6 19:00:46 2026 GMT Not After : Mar 7 19:00:46 2026 GMT Subject: CN=f3c99e6208d5724f25cf9549bc1d719cc83bd17a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:90:bc:a5:1f:3d:89:c7:d9:2b:cc:8f:11:6f: a7:80:78:b6:83:ed:ab:e0:e6:a1:6c:25:70:d6:af: 4d:98:f3:b8:d6:cf:40:c5:44:dd:e7:9c:ec:11:7b: 8f:eb:2c:fd:c4:c0:0d:0e:d2:27:ae:c3:c2:ad:95: e9:fd:d7:8e:01:63:f0:cf:4b:92:0a:c4:48:14:0f: e3:0f:ab:c7:f1:e9:5d:e5:9d:36:8c:55:55:ec:f7: d6:77:c1:b3:17:a3:5e:98:53:60:97:67:1f:cb:d8: 33:9b:8c:54:66:bc:27:df:d9:e8:09:b3:d3:da:be: b6:52:9d:c4:50:f0:83:55:4b:61:86:81:32:ff:71: 1e:f7:f0:17:77:3a:fa:6d:31:69:c4:84:3f:dc:8d: 02:7a:17:95:6e:32:da:99:32:59:17:db:b1:cb:13: 84:e8:04:bc:a7:8c:d1:01:78:57:2f:aa:eb:45:f6: b2:71:ef:eb:58:53:fb:6f:50:5e:45:79:fd:ea:b1: 31:1c:f9:13:ce:a1:e5:e8:93:aa:c6:33:ee:2f:7a: 91:8c:52:3c:79:97:ee:e4:bc:87:b9:3b:75:1e:c5: 8a:db:2e:66:3b:a4:cc:50:ab:01:53:93:39:3b:fc: c2:c0:67:90:97:36:30:c6:6b:5b:5f:ba:c8:e6:cf: 62:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:C9:9E:62:08:D5:72:4F:25:CF:95:49:BC:1D:71:9C:C8:3B:D1:7A X509v3 Authority Key Identifier: keyid:82:1A:3F:21:FB:0C:29:4D:6D:4A:52:9B:2F:1D:BD:4B:D1:11:9B:D7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gho_IfsMKU1tSlKbLx29S9ERm9c.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/edc855-f2bc-4e9c-8c0c-b6f2ac86ef27/1/gho_IfsMKU1tSlKbLx29S9ERm9c.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/12/edc855-f2bc-4e9c-8c0c-b6f2ac86ef27/1/gho_IfsMKU1tSlKbLx29S9ERm9c.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3d:3c:04:b2:75:3b:ce:45:01:69:b3:79:2d:66:60:4b:33:39: 0c:e7:de:24:75:53:6c:97:17:64:8f:60:c9:b5:2d:74:48:af: c4:d0:ca:9a:e5:f2:b2:bf:e4:db:e3:65:13:88:ac:cc:71:db: 9d:7f:60:ad:8c:17:2a:49:bf:a4:f8:60:0a:c6:a8:f6:f5:72: 16:e6:a2:21:1a:44:a2:76:5b:a4:d8:3b:a7:db:4c:76:d2:10: 54:5f:23:b9:45:c4:c3:9d:a2:4c:52:17:34:61:f0:4c:0a:1d: 70:6e:de:d9:01:11:46:25:66:c5:65:4f:b2:89:25:ce:ad:f8: 94:ca:12:aa:4c:c2:1f:ff:52:31:bc:6e:ed:69:2c:79:64:43: b1:98:bc:d6:73:ee:8d:b2:fd:73:0a:ce:78:5e:11:7a:73:5e: 83:cc:d4:c6:48:43:0d:b7:de:29:56:79:02:30:5f:b4:c6:ab: 8c:cb:d7:73:93:eb:40:b6:9b:ea:e7:8e:cd:b0:fc:0f:1f:ef: 4c:6a:7d:67:c0:c6:b5:20:13:ae:f0:59:be:be:57:a5:b7:b1: 1d:ad:01:87:91:2a:a2:f4:86:40:ef:95:c8:1a:d7:2f:f5:0d: a1:73:7f:a3:6b:13:a7:22:bf:06:6d:de:3c:0c:32:c7:07:9e: 05:a7:7e:be -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZzEhhE4Z6Ynu4l96U552tNjMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDgyMWEzZjIxZmIwYzI5NGQ2ZDRhNTI5YjJmMWRiZDRiZDEx MTliZDcwHhcNMjYwMzA2MTkwMDQ2WhcNMjYwMzA3MTkwMDQ2WjAzMTEwLwYDVQQD EyhmM2M5OWU2MjA4ZDU3MjRmMjVjZjk1NDliYzFkNzE5Y2M4M2JkMTdhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArJC8pR89icfZK8yPEW+ngHi2g+2r 4OahbCVw1q9NmPO41s9AxUTd55zsEXuP6yz9xMANDtInrsPCrZXp/deOAWPwz0uS CsRIFA/jD6vH8eld5Z02jFVV7PfWd8GzF6NemFNgl2cfy9gzm4xUZrwn39noCbPT 2r62Up3EUPCDVUthhoEy/3Ee9/AXdzr6bTFpxIQ/3I0CeheVbjLamTJZF9uxyxOE 6AS8p4zRAXhXL6rrRfayce/rWFP7b1BeRXn96rExHPkTzqHl6JOqxjPuL3qRjFI8 eZfu5LyHuTt1HsWK2y5mO6TMUKsBU5M5O/zCwGeQlzYwxmtbX7rI5s9izQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPPJnmII1XJPJc+VSbwdcZzIO9F6MB8GA1UdIwQY MBaAFIIaPyH7DClNbUpSmy8dvUvREZvXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZ2hvX0lmc01LVTF0U2xLYkx4MjlTOUVSbTljLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMi9lZGM4NTUtZjJiYy00ZTljLThjMGMt YjZmMmFjODZlZjI3LzEvZ2hvX0lmc01LVTF0U2xLYkx4MjlTOUVSbTljLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMi9lZGM4NTUtZjJiYy00ZTljLThjMGMtYjZmMmFjODZlZjI3 LzEvZ2hvX0lmc01LVTF0U2xLYkx4MjlTOUVSbTljLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPTwEsnU7 zkUBabN5LWZgSzM5DOfeJHVTbJcXZI9gybUtdEivxNDKmuXysr/k2+NlE4iszHHb nX9grYwXKkm/pPhgCsao9vVyFuaiIRpEonZbpNg7p9tMdtIQVF8juUXEw52iTFIX NGHwTAodcG7e2QERRiVmxWVPsoklzq34lMoSqkzCH/9SMbxu7WkseWRDsZi81nPu jbL9cwrOeF4RenNeg8zUxkhDDbfeKVZ5AjBftMarjMvXc5PrQLab6ueOzbD8Dx/v TGp9Z8DGtSATrvBZvr5XpbexHa0Bh5EqovSGQO+VyBrXL/UNoXN/o2sTpyK/Bm3e PAwyxweeBad+vg== -----END CERTIFICATE-----Generated at Fri Mar 6 21:27:40 2026 by rpki-client