$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/12/edc855-f2bc-4e9c-8c0c-b6f2ac86ef27/1/gho_IfsMKU1tSlKbLx29S9ERm9c.mft File: gho_IfsMKU1tSlKbLx29S9ERm9c.mft (raw, json) Hash identifier: ujt0V8CrpDrruPZRtqv/DRtKJep4xhm52ng1pYaWwkY= Subject key identifier: 95:84:2F:E0:A3:88:C7:8D:14:53:C8:17:82:CE:36:B9:17:90:D4:4E Authority key identifier: 82:1A:3F:21:FB:0C:29:4D:6D:4A:52:9B:2F:1D:BD:4B:D1:11:9B:D7 Certificate issuer: /CN=821a3f21fb0c294d6d4a529b2f1dbd4bd1119bd7 Certificate serial: 01A175F0AB537B08F7CA837FF723F4FF5CE5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gho_IfsMKU1tSlKbLx29S9ERm9c.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/edc855-f2bc-4e9c-8c0c-b6f2ac86ef27/1/gho_IfsMKU1tSlKbLx29S9ERm9c.mft Manifest number: 1528 Signing time: Mon 26 Oct 2026 02:01:09 +0000 Manifest this update: Mon 26 Oct 2026 02:01:09 +0000 Manifest next update: Tue 27 Oct 2026 02:01:09 +0000 Files and hashes: 1: 94DmWvO75aSCrTILT7xO5QfIZ4Q.roa (hash: yowEVWaH5JasWlMxUT7Mgz1/3iSP8rVz/KjlsGeBATs=) 2: I0ycopSi6_q86tsS_2ZsGMaSE7E.roa (hash: X5k67tgIigX44haykK5HKygDUVpwt1sPzwvIgtRhgUo=) 3: Lw_o47E9qYaZtJPZjp5m1M1e0_o.roa (hash: TnHpGib6gDq3lP3ubauOs2iA7D/xB8DKvaZF7GPTkuk=) 4: MRCItQ1B9948OVdVK1kL96AGPQI.roa (hash: ZQgpMxwvj3QAdwytn7kSRtX4MaK4Pcv8MlZ4Lzpi3Pg=) 5: OQ-6VTdp1vw9GrjNLFmvI9JYOrs.roa (hash: ZPmtBIJ2La5bnUm+sApv+AeoWDVjiZhyYSZEHB1jKmo=) 6: OxJM60qRQUOtdqYrv27xs3_kv9k.roa (hash: w3ZIUcbiJQn/X+ANNYduQprQtRgqv43tl64iIBJ+uVs=) 7: PujNlKftYzeQaE0MnZm0EPh4AFY.roa (hash: KOYoiHizuILiOcTb5DR0niku+PQ57DIf210w8rlbdQY=) 8: PyHODj5n0DejAoWrQZBIRXaXo6Y.roa (hash: 3ofBNW8DPxuvHoS9tkTr0YH1zUrrGyXEWYQ/aOGrjNI=) 9: RTPP9X2zvoR_qL8VtqZr6WEHKzw.roa (hash: bz39/MS5H8r1qd18PCFQ3+2kRu1MJoP1Vd1Xyr//BW0=) 10: WGYchnyCAbqQd8pzwZhRwcjvgv8.roa (hash: I9YjzWZ/pqf8yScr+6TqbtawBHd4EYuPwRC5bUBqVQw=) 11: Wz0IiveJRR3iZ_TFadI3Bt6mJJE.roa (hash: CImcnKPxhqg5cF+ps6Yupe+fhV0VE9C6rzuLTV7FS3Q=) 12: X2QsnfxAM9ScjVh_AzAztNDaXJg.roa (hash: L4YEdLYOkjYPPZMBRJDRYkJkVBQq0athDIG3eYPShmM=) 13: Z_IuqEKKfXuEOIP93u24e6BLk0E.roa (hash: 9YG/wmkjQ+naLweN0fWYFNb6KTTbRHlNigN8yWNOBNk=) 14: bjs_zJFuHzjoxK2NthqbKcV1s-8.roa (hash: Eg2O923oFj6n/iosVJD0SXVlsUTZEP0y964Jkw4vJR0=) 15: gho_IfsMKU1tSlKbLx29S9ERm9c.crl (hash: VuyQl8Fx61jdJhvvqVWdS4BKLsw/n6hkGYhiU8HYYl4=) 16: kELckgtwVoSvJeEmqDzRwJ_w8M4.roa (hash: ryrV6l1reh0IiB1vVcw5FXf5SQ2NaFZbF4Pl/NJCuQ4=) 17: u26dzWx1WsuAyPhRE3IG1GMmdJc.roa (hash: gEHPHjFqESUZPon7FHlszrJPYiDLqkhRmgKIOhvsfGY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/edc855-f2bc-4e9c-8c0c-b6f2ac86ef27/1/gho_IfsMKU1tSlKbLx29S9ERm9c.crl rsync://rpki.ripe.net/repository/DEFAULT/12/edc855-f2bc-4e9c-8c0c-b6f2ac86ef27/1/gho_IfsMKU1tSlKbLx29S9ERm9c.mft rsync://rpki.ripe.net/repository/DEFAULT/gho_IfsMKU1tSlKbLx29S9ERm9c.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Oct 2026 02:00:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a1:75:f0:ab:53:7b:08:f7:ca:83:7f:f7:23:f4:ff:5c:e5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=821a3f21fb0c294d6d4a529b2f1dbd4bd1119bd7 Validity Not Before: Oct 26 02:01:09 2026 GMT Not After : Oct 27 02:01:09 2026 GMT Subject: CN=95842fe0a388c78d1453c81782ce36b91790d44e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:28:dd:31:69:ce:72:e9:15:f9:5d:b2:e2:85: d1:2c:3b:40:4b:c6:c2:51:99:a8:2c:30:8a:e3:63: 90:38:3a:6a:9e:6d:5e:69:d6:fa:cd:ad:4c:a7:d8: 86:57:b6:9e:a6:11:6f:33:56:2b:a5:70:a9:bd:7c: 7c:eb:d3:44:f7:d4:bf:61:b5:4b:e0:63:21:c0:ba: 4d:7d:1b:b9:5f:9f:5c:e1:bd:3e:b3:2f:da:37:2e: 03:af:44:08:10:ee:bd:11:c2:38:b8:af:b6:2f:1e: 61:e8:2a:66:3a:7c:34:fc:07:6d:2d:30:c3:14:fe: 2e:93:9b:ef:05:7a:36:b5:0d:d9:5a:63:e5:40:be: cb:34:da:81:dc:82:41:4e:6d:24:6c:98:d3:a0:b3: 87:31:b0:3b:ca:b4:8d:75:ed:36:4f:32:dc:2d:8f: a2:14:86:95:35:22:4d:f6:94:06:de:1e:cb:5b:91: eb:bc:1a:7f:c3:03:ac:a8:c5:dd:51:e1:12:5d:fa: f0:70:45:29:eb:82:a4:50:15:d7:d1:e2:dc:76:0a: b4:f3:64:f9:4c:aa:51:3d:19:c5:d7:26:83:65:f0: 57:51:a6:11:e6:ef:e7:88:af:d5:ae:d9:87:c3:36: a4:3c:ad:9e:d5:b8:a3:d2:93:4f:79:d5:43:9f:33: 89:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:84:2F:E0:A3:88:C7:8D:14:53:C8:17:82:CE:36:B9:17:90:D4:4E X509v3 Authority Key Identifier: keyid:82:1A:3F:21:FB:0C:29:4D:6D:4A:52:9B:2F:1D:BD:4B:D1:11:9B:D7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gho_IfsMKU1tSlKbLx29S9ERm9c.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/edc855-f2bc-4e9c-8c0c-b6f2ac86ef27/1/gho_IfsMKU1tSlKbLx29S9ERm9c.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/12/edc855-f2bc-4e9c-8c0c-b6f2ac86ef27/1/gho_IfsMKU1tSlKbLx29S9ERm9c.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3c:8c:cc:76:4c:ed:37:d1:d5:12:a3:21:04:12:73:4f:97:c4: 9c:98:4e:05:91:d1:ee:ed:07:c5:9a:dc:24:0e:22:3d:79:1e: 2b:4a:ad:7c:7e:48:fd:83:db:b7:24:d8:86:13:fe:4d:dd:40: 45:24:5c:18:9f:4d:12:df:cf:60:67:91:0f:09:85:3d:ff:76: 41:bd:44:e9:7b:84:ed:a1:e7:3e:d8:81:d0:12:1d:36:c7:23: 37:3f:a9:db:42:f1:d7:d6:2d:bd:63:73:72:30:64:ba:12:40: 3b:ef:c2:43:1e:84:04:90:5e:c1:dc:82:db:5c:64:f5:c4:24: e5:a4:88:62:06:85:ae:78:9a:b0:50:4f:1c:62:78:f9:54:c7: 74:88:8b:dc:01:ed:79:f3:aa:78:98:3f:2b:10:d1:bd:b0:ff: 2f:1f:0d:3b:59:78:30:30:9b:13:a1:94:57:28:de:19:d2:af: 82:c7:43:f3:dc:63:b8:b8:bd:8b:9d:d4:81:5b:9c:10:a9:09: 16:40:e5:c5:79:e4:3b:09:6f:ee:73:45:d7:42:1f:b1:42:e1: fd:4c:15:71:5a:f7:72:a4:c3:a0:f8:8a:1d:db:22:2f:c1:75: 0d:15:21:74:b4:a4:7b:d5:c2:c4:54:6e:29:cd:91:68:b8:61: 3d:37:6d:5b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaF18KtTewj3yoN/9yP0/1zlMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDgyMWEzZjIxZmIwYzI5NGQ2ZDRhNTI5YjJmMWRiZDRiZDEx MTliZDcwHhcNMjYxMDI2MDIwMTA5WhcNMjYxMDI3MDIwMTA5WjAzMTEwLwYDVQQD Eyg5NTg0MmZlMGEzODhjNzhkMTQ1M2M4MTc4MmNlMzZiOTE3OTBkNDRlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuSjdMWnOcukV+V2y4oXRLDtAS8bC UZmoLDCK42OQODpqnm1eadb6za1Mp9iGV7aephFvM1YrpXCpvXx869NE99S/YbVL 4GMhwLpNfRu5X59c4b0+sy/aNy4Dr0QIEO69EcI4uK+2Lx5h6CpmOnw0/AdtLTDD FP4uk5vvBXo2tQ3ZWmPlQL7LNNqB3IJBTm0kbJjToLOHMbA7yrSNde02TzLcLY+i FIaVNSJN9pQG3h7LW5HrvBp/wwOsqMXdUeESXfrwcEUp64KkUBXX0eLcdgq082T5 TKpRPRnF1yaDZfBXUaYR5u/niK/VrtmHwzakPK2e1bij0pNPedVDnzOJ4wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJWEL+CjiMeNFFPIF4LONrkXkNROMB8GA1UdIwQY MBaAFIIaPyH7DClNbUpSmy8dvUvREZvXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZ2hvX0lmc01LVTF0U2xLYkx4MjlTOUVSbTljLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMi9lZGM4NTUtZjJiYy00ZTljLThjMGMt YjZmMmFjODZlZjI3LzEvZ2hvX0lmc01LVTF0U2xLYkx4MjlTOUVSbTljLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMi9lZGM4NTUtZjJiYy00ZTljLThjMGMtYjZmMmFjODZlZjI3 LzEvZ2hvX0lmc01LVTF0U2xLYkx4MjlTOUVSbTljLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPIzMdkzt N9HVEqMhBBJzT5fEnJhOBZHR7u0HxZrcJA4iPXkeK0qtfH5I/YPbtyTYhhP+Td1A RSRcGJ9NEt/PYGeRDwmFPf92Qb1E6XuE7aHnPtiB0BIdNscjNz+p20Lx19YtvWNz cjBkuhJAO+/CQx6EBJBewdyC21xk9cQk5aSIYgaFrniasFBPHGJ4+VTHdIiL3AHt efOqeJg/KxDRvbD/Lx8NO1l4MDCbE6GUVyjeGdKvgsdD89xjuLi9i53UgVucEKkJ FkDlxXnkOwlv7nNF10IfsULh/UwVcVr3cqTDoPiKHdsiL8F1DRUhdLSke9XCxFRu Kc2RaLhhPTdtWw== -----END CERTIFICATE-----Generated at Mon Oct 26 14:23:30 2026 by rpki-client