$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/12/edc855-f2bc-4e9c-8c0c-b6f2ac86ef27/1/gho_IfsMKU1tSlKbLx29S9ERm9c.mft File: gho_IfsMKU1tSlKbLx29S9ERm9c.mft (raw, json) Hash identifier: kNrUR5LT4+zgaln80oIG0WCEEijLZzcYnfmNBf+TgAw= Subject key identifier: DF:6F:76:DC:38:19:75:B8:8B:98:47:15:20:FB:85:DB:3D:D0:E5:3C Authority key identifier: 82:1A:3F:21:FB:0C:29:4D:6D:4A:52:9B:2F:1D:BD:4B:D1:11:9B:D7 Certificate issuer: /CN=821a3f21fb0c294d6d4a529b2f1dbd4bd1119bd7 Certificate serial: 01A128B12F3FF82B0DD1E265C30A70DD827E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gho_IfsMKU1tSlKbLx29S9ERm9c.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/edc855-f2bc-4e9c-8c0c-b6f2ac86ef27/1/gho_IfsMKU1tSlKbLx29S9ERm9c.mft Manifest number: 1500 Signing time: Sun 11 Oct 2026 02:01:02 +0000 Manifest this update: Sun 11 Oct 2026 02:01:02 +0000 Manifest next update: Mon 12 Oct 2026 02:01:02 +0000 Files and hashes: 1: 94DmWvO75aSCrTILT7xO5QfIZ4Q.roa (hash: yowEVWaH5JasWlMxUT7Mgz1/3iSP8rVz/KjlsGeBATs=) 2: I0ycopSi6_q86tsS_2ZsGMaSE7E.roa (hash: X5k67tgIigX44haykK5HKygDUVpwt1sPzwvIgtRhgUo=) 3: Lw_o47E9qYaZtJPZjp5m1M1e0_o.roa (hash: TnHpGib6gDq3lP3ubauOs2iA7D/xB8DKvaZF7GPTkuk=) 4: MRCItQ1B9948OVdVK1kL96AGPQI.roa (hash: ZQgpMxwvj3QAdwytn7kSRtX4MaK4Pcv8MlZ4Lzpi3Pg=) 5: OQ-6VTdp1vw9GrjNLFmvI9JYOrs.roa (hash: ZPmtBIJ2La5bnUm+sApv+AeoWDVjiZhyYSZEHB1jKmo=) 6: OxJM60qRQUOtdqYrv27xs3_kv9k.roa (hash: w3ZIUcbiJQn/X+ANNYduQprQtRgqv43tl64iIBJ+uVs=) 7: PujNlKftYzeQaE0MnZm0EPh4AFY.roa (hash: KOYoiHizuILiOcTb5DR0niku+PQ57DIf210w8rlbdQY=) 8: PyHODj5n0DejAoWrQZBIRXaXo6Y.roa (hash: 3ofBNW8DPxuvHoS9tkTr0YH1zUrrGyXEWYQ/aOGrjNI=) 9: RTPP9X2zvoR_qL8VtqZr6WEHKzw.roa (hash: bz39/MS5H8r1qd18PCFQ3+2kRu1MJoP1Vd1Xyr//BW0=) 10: WGYchnyCAbqQd8pzwZhRwcjvgv8.roa (hash: I9YjzWZ/pqf8yScr+6TqbtawBHd4EYuPwRC5bUBqVQw=) 11: Wz0IiveJRR3iZ_TFadI3Bt6mJJE.roa (hash: CImcnKPxhqg5cF+ps6Yupe+fhV0VE9C6rzuLTV7FS3Q=) 12: X2QsnfxAM9ScjVh_AzAztNDaXJg.roa (hash: L4YEdLYOkjYPPZMBRJDRYkJkVBQq0athDIG3eYPShmM=) 13: Z_IuqEKKfXuEOIP93u24e6BLk0E.roa (hash: 9YG/wmkjQ+naLweN0fWYFNb6KTTbRHlNigN8yWNOBNk=) 14: bjs_zJFuHzjoxK2NthqbKcV1s-8.roa (hash: Eg2O923oFj6n/iosVJD0SXVlsUTZEP0y964Jkw4vJR0=) 15: gho_IfsMKU1tSlKbLx29S9ERm9c.crl (hash: oUb6AV9q5a/jRkrk/VwWmHVnABcWHjLZMC68cd6ZzlQ=) 16: kELckgtwVoSvJeEmqDzRwJ_w8M4.roa (hash: ryrV6l1reh0IiB1vVcw5FXf5SQ2NaFZbF4Pl/NJCuQ4=) 17: u26dzWx1WsuAyPhRE3IG1GMmdJc.roa (hash: gEHPHjFqESUZPon7FHlszrJPYiDLqkhRmgKIOhvsfGY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/edc855-f2bc-4e9c-8c0c-b6f2ac86ef27/1/gho_IfsMKU1tSlKbLx29S9ERm9c.crl rsync://rpki.ripe.net/repository/DEFAULT/12/edc855-f2bc-4e9c-8c0c-b6f2ac86ef27/1/gho_IfsMKU1tSlKbLx29S9ERm9c.mft rsync://rpki.ripe.net/repository/DEFAULT/gho_IfsMKU1tSlKbLx29S9ERm9c.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 11 Oct 2026 20:00:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a1:28:b1:2f:3f:f8:2b:0d:d1:e2:65:c3:0a:70:dd:82:7e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=821a3f21fb0c294d6d4a529b2f1dbd4bd1119bd7 Validity Not Before: Oct 11 02:01:02 2026 GMT Not After : Oct 12 02:01:02 2026 GMT Subject: CN=df6f76dc381975b88b98471520fb85db3dd0e53c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:cf:07:95:8e:72:bf:73:29:af:59:27:7a:b7: 53:46:3c:8e:ae:63:9e:9b:6a:4e:99:45:60:4b:c5: bd:fe:04:4f:86:b7:bd:a4:75:4f:9a:0d:67:76:97: 95:67:9a:12:01:2e:04:c1:7a:7a:3c:9e:16:8f:40: d1:f9:1b:7b:c1:ac:e2:90:52:1f:1b:c5:20:ab:49: bd:48:1a:e3:00:5b:dd:1d:b1:2a:df:67:ae:c8:70: ec:d9:a0:9b:1e:cc:ad:cf:50:12:ec:dd:d8:9a:51: cc:c9:ba:8e:b0:81:b3:f7:cd:39:e6:de:f2:5a:37: aa:46:07:a6:a4:2d:a2:59:68:9a:b8:f1:b8:02:e7: 01:6a:6e:41:d3:9f:12:b9:04:cd:7d:ca:4f:56:bf: 7d:65:2e:03:2c:f2:b2:07:8d:71:62:11:8d:b1:cc: 28:56:67:5c:2e:cb:ae:60:c7:c5:06:b2:1f:04:a1: 95:08:56:d6:07:c4:48:02:29:ce:0a:86:77:af:c7: c4:97:be:e8:41:12:82:22:01:4d:36:27:f0:0a:f9: c6:65:2b:50:d7:28:54:23:b5:b2:5b:88:dd:69:be: cf:47:f6:34:0d:c9:77:90:08:f4:13:67:5d:80:44: 79:f5:26:27:9a:eb:c2:fa:b9:ee:c9:b9:89:60:63: 14:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:6F:76:DC:38:19:75:B8:8B:98:47:15:20:FB:85:DB:3D:D0:E5:3C X509v3 Authority Key Identifier: keyid:82:1A:3F:21:FB:0C:29:4D:6D:4A:52:9B:2F:1D:BD:4B:D1:11:9B:D7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gho_IfsMKU1tSlKbLx29S9ERm9c.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/edc855-f2bc-4e9c-8c0c-b6f2ac86ef27/1/gho_IfsMKU1tSlKbLx29S9ERm9c.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/12/edc855-f2bc-4e9c-8c0c-b6f2ac86ef27/1/gho_IfsMKU1tSlKbLx29S9ERm9c.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6e:bb:01:a7:42:c4:35:e3:90:64:cf:09:cb:67:f0:6c:39:5d: 4c:f1:01:a0:fd:38:c7:2b:bb:3d:45:4d:3a:3d:03:39:ca:f0: 24:f8:e0:65:fa:fd:06:2e:99:da:bd:80:56:d5:31:ce:36:ff: 71:2e:d7:bb:84:c7:06:49:42:b3:86:97:34:ed:37:83:5e:11: 6f:d1:e4:6e:1a:ad:5a:2f:67:fa:4e:4b:43:51:91:b1:b9:e6: 36:60:32:45:88:05:d2:8a:dd:1e:d0:98:f4:56:d3:f7:c8:a8: 33:35:54:f9:75:7b:19:54:2d:79:e2:02:db:ad:af:43:c4:e2: 74:29:c4:d6:6c:1b:e7:8f:a7:c3:dd:aa:0c:12:3c:9f:65:d2: 32:92:fd:c2:a3:16:be:fe:25:b8:8e:04:5b:27:0f:02:91:a7: ee:50:b6:1f:70:16:b1:4b:4e:1a:c1:ef:d8:6f:10:38:22:98: 81:56:45:e6:5d:51:4e:ab:13:f0:a0:9a:72:b4:7f:22:52:45: 3d:96:b7:ea:e0:c6:26:20:44:d7:29:24:e4:37:52:c6:a6:a7: eb:31:ab:e7:4e:96:46:5a:de:e1:ef:f5:73:c0:ce:0f:73:fc: 39:84:9b:29:4c:02:b7:1f:c0:c4:ef:fd:b2:ae:ea:a9:27:20: 54:b3:86:04 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaEosS8/+CsN0eJlwwpw3YJ+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDgyMWEzZjIxZmIwYzI5NGQ2ZDRhNTI5YjJmMWRiZDRiZDEx MTliZDcwHhcNMjYxMDExMDIwMTAyWhcNMjYxMDEyMDIwMTAyWjAzMTEwLwYDVQQD EyhkZjZmNzZkYzM4MTk3NWI4OGI5ODQ3MTUyMGZiODVkYjNkZDBlNTNjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA088HlY5yv3Mpr1knerdTRjyOrmOe m2pOmUVgS8W9/gRPhre9pHVPmg1ndpeVZ5oSAS4EwXp6PJ4Wj0DR+Rt7wazikFIf G8Ugq0m9SBrjAFvdHbEq32euyHDs2aCbHsytz1AS7N3YmlHMybqOsIGz98055t7y WjeqRgempC2iWWiauPG4AucBam5B058SuQTNfcpPVr99ZS4DLPKyB41xYhGNscwo VmdcLsuuYMfFBrIfBKGVCFbWB8RIAinOCoZ3r8fEl77oQRKCIgFNNifwCvnGZStQ 1yhUI7WyW4jdab7PR/Y0Dcl3kAj0E2ddgER59SYnmuvC+rnuybmJYGMUoQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFN9vdtw4GXW4i5hHFSD7hds90OU8MB8GA1UdIwQY MBaAFIIaPyH7DClNbUpSmy8dvUvREZvXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZ2hvX0lmc01LVTF0U2xLYkx4MjlTOUVSbTljLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMi9lZGM4NTUtZjJiYy00ZTljLThjMGMt YjZmMmFjODZlZjI3LzEvZ2hvX0lmc01LVTF0U2xLYkx4MjlTOUVSbTljLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMi9lZGM4NTUtZjJiYy00ZTljLThjMGMtYjZmMmFjODZlZjI3 LzEvZ2hvX0lmc01LVTF0U2xLYkx4MjlTOUVSbTljLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbrsBp0LE NeOQZM8Jy2fwbDldTPEBoP04xyu7PUVNOj0DOcrwJPjgZfr9Bi6Z2r2AVtUxzjb/ cS7Xu4THBklCs4aXNO03g14Rb9HkbhqtWi9n+k5LQ1GRsbnmNmAyRYgF0ordHtCY 9FbT98ioMzVU+XV7GVQteeIC262vQ8TidCnE1mwb54+nw92qDBI8n2XSMpL9wqMW vv4luI4EWycPApGn7lC2H3AWsUtOGsHv2G8QOCKYgVZF5l1RTqsT8KCacrR/IlJF PZa36uDGJiBE1ykk5DdSxqan6zGr506WRlre4e/1c8DOD3P8OYSbKUwCtx/AxO/9 sq7qqScgVLOGBA== -----END CERTIFICATE-----Generated at Sun Oct 11 06:14:04 2026 by rpki-client