$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/12/edc855-f2bc-4e9c-8c0c-b6f2ac86ef27/1/gho_IfsMKU1tSlKbLx29S9ERm9c.mft File: gho_IfsMKU1tSlKbLx29S9ERm9c.mft (raw, json) Hash identifier: L5dscY7BncwvpdGthebv0RSuiS69QVUKxJHwRowooHE= Subject key identifier: 35:65:F4:0A:AB:7C:1B:A3:B5:AC:BA:97:9F:71:AD:4A:A7:BE:51:6E Authority key identifier: 82:1A:3F:21:FB:0C:29:4D:6D:4A:52:9B:2F:1D:BD:4B:D1:11:9B:D7 Certificate issuer: /CN=821a3f21fb0c294d6d4a529b2f1dbd4bd1119bd7 Certificate serial: 01A0FC46B8CA6B94FDEE1D2B01C4F11F3508 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gho_IfsMKU1tSlKbLx29S9ERm9c.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/edc855-f2bc-4e9c-8c0c-b6f2ac86ef27/1/gho_IfsMKU1tSlKbLx29S9ERm9c.mft Manifest number: 14E9 Signing time: Fri 02 Oct 2026 11:01:28 +0000 Manifest this update: Fri 02 Oct 2026 11:01:28 +0000 Manifest next update: Sat 03 Oct 2026 11:01:28 +0000 Files and hashes: 1: 94DmWvO75aSCrTILT7xO5QfIZ4Q.roa (hash: yowEVWaH5JasWlMxUT7Mgz1/3iSP8rVz/KjlsGeBATs=) 2: I0ycopSi6_q86tsS_2ZsGMaSE7E.roa (hash: X5k67tgIigX44haykK5HKygDUVpwt1sPzwvIgtRhgUo=) 3: Lw_o47E9qYaZtJPZjp5m1M1e0_o.roa (hash: TnHpGib6gDq3lP3ubauOs2iA7D/xB8DKvaZF7GPTkuk=) 4: MRCItQ1B9948OVdVK1kL96AGPQI.roa (hash: ZQgpMxwvj3QAdwytn7kSRtX4MaK4Pcv8MlZ4Lzpi3Pg=) 5: OQ-6VTdp1vw9GrjNLFmvI9JYOrs.roa (hash: ZPmtBIJ2La5bnUm+sApv+AeoWDVjiZhyYSZEHB1jKmo=) 6: OxJM60qRQUOtdqYrv27xs3_kv9k.roa (hash: w3ZIUcbiJQn/X+ANNYduQprQtRgqv43tl64iIBJ+uVs=) 7: PujNlKftYzeQaE0MnZm0EPh4AFY.roa (hash: KOYoiHizuILiOcTb5DR0niku+PQ57DIf210w8rlbdQY=) 8: PyHODj5n0DejAoWrQZBIRXaXo6Y.roa (hash: 3ofBNW8DPxuvHoS9tkTr0YH1zUrrGyXEWYQ/aOGrjNI=) 9: RTPP9X2zvoR_qL8VtqZr6WEHKzw.roa (hash: bz39/MS5H8r1qd18PCFQ3+2kRu1MJoP1Vd1Xyr//BW0=) 10: WGYchnyCAbqQd8pzwZhRwcjvgv8.roa (hash: I9YjzWZ/pqf8yScr+6TqbtawBHd4EYuPwRC5bUBqVQw=) 11: Wz0IiveJRR3iZ_TFadI3Bt6mJJE.roa (hash: CImcnKPxhqg5cF+ps6Yupe+fhV0VE9C6rzuLTV7FS3Q=) 12: X2QsnfxAM9ScjVh_AzAztNDaXJg.roa (hash: L4YEdLYOkjYPPZMBRJDRYkJkVBQq0athDIG3eYPShmM=) 13: Z_IuqEKKfXuEOIP93u24e6BLk0E.roa (hash: 9YG/wmkjQ+naLweN0fWYFNb6KTTbRHlNigN8yWNOBNk=) 14: bjs_zJFuHzjoxK2NthqbKcV1s-8.roa (hash: Eg2O923oFj6n/iosVJD0SXVlsUTZEP0y964Jkw4vJR0=) 15: gho_IfsMKU1tSlKbLx29S9ERm9c.crl (hash: 4wIKqLypi0uWpIFpET5uojaaet7gtcsR0LzVFDEH6S4=) 16: kELckgtwVoSvJeEmqDzRwJ_w8M4.roa (hash: ryrV6l1reh0IiB1vVcw5FXf5SQ2NaFZbF4Pl/NJCuQ4=) 17: u26dzWx1WsuAyPhRE3IG1GMmdJc.roa (hash: gEHPHjFqESUZPon7FHlszrJPYiDLqkhRmgKIOhvsfGY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/edc855-f2bc-4e9c-8c0c-b6f2ac86ef27/1/gho_IfsMKU1tSlKbLx29S9ERm9c.crl rsync://rpki.ripe.net/repository/DEFAULT/12/edc855-f2bc-4e9c-8c0c-b6f2ac86ef27/1/gho_IfsMKU1tSlKbLx29S9ERm9c.mft rsync://rpki.ripe.net/repository/DEFAULT/gho_IfsMKU1tSlKbLx29S9ERm9c.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 03 Oct 2026 08:00:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a0:fc:46:b8:ca:6b:94:fd:ee:1d:2b:01:c4:f1:1f:35:08 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=821a3f21fb0c294d6d4a529b2f1dbd4bd1119bd7 Validity Not Before: Oct 2 11:01:28 2026 GMT Not After : Oct 3 11:01:28 2026 GMT Subject: CN=3565f40aab7c1ba3b5acba979f71ad4aa7be516e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:6e:f1:80:2a:dc:c8:33:0a:91:c7:b1:c3:f2: 44:6c:67:72:14:0e:62:ac:3a:d7:41:eb:bf:37:76: c6:b8:3f:83:5f:a6:f5:25:c6:71:f2:6e:0f:00:93: 00:69:fc:d2:4e:d3:8f:3f:d2:62:3a:67:5b:57:c8: 00:dc:4c:bc:1a:05:a1:ad:03:1c:02:10:af:65:b8: 90:b7:c5:41:21:14:b8:97:f5:cc:cc:25:55:0b:3c: 34:b9:2e:86:82:9c:1c:15:3d:e3:71:48:93:4f:10: 03:0c:6d:fb:33:2d:26:e2:09:9b:3e:8f:6d:e2:9e: fa:a8:99:63:2c:aa:17:24:ca:ba:f7:79:f0:6f:1d: 57:80:3e:0d:d7:9d:51:04:09:01:37:1d:83:cc:24: 49:0b:92:cd:1c:aa:72:0a:c4:66:c6:b9:fd:9b:b4: 75:e0:74:28:39:be:67:47:d0:7b:b6:11:72:71:e1: fd:95:4d:81:fa:a7:28:c1:c6:bf:8b:9d:95:c1:51: 99:7f:32:d1:cc:3e:9a:39:0b:f9:9c:95:14:38:93: ee:e4:95:a9:6a:37:23:dd:2c:b4:85:ee:30:ff:d8: 07:58:84:d8:55:ab:78:a5:6d:e2:37:c3:19:9b:e2: 79:5f:e2:1b:b6:5a:c4:65:b5:4c:eb:e7:8f:80:6a: f9:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:65:F4:0A:AB:7C:1B:A3:B5:AC:BA:97:9F:71:AD:4A:A7:BE:51:6E X509v3 Authority Key Identifier: keyid:82:1A:3F:21:FB:0C:29:4D:6D:4A:52:9B:2F:1D:BD:4B:D1:11:9B:D7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gho_IfsMKU1tSlKbLx29S9ERm9c.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/edc855-f2bc-4e9c-8c0c-b6f2ac86ef27/1/gho_IfsMKU1tSlKbLx29S9ERm9c.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/12/edc855-f2bc-4e9c-8c0c-b6f2ac86ef27/1/gho_IfsMKU1tSlKbLx29S9ERm9c.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0d:7c:09:f0:0e:49:91:99:a2:f5:65:93:e9:91:52:96:a6:de: 0e:0f:bc:90:83:e6:2e:17:4f:82:83:88:c7:2a:7a:81:95:50: e8:60:27:aa:54:bf:54:98:8c:71:30:e9:28:1b:fc:12:85:69: f5:cd:08:1f:b5:00:71:51:59:04:57:f3:a2:6a:c7:11:49:1a: cc:d7:73:a5:7c:5a:a1:f6:cb:40:46:7e:6f:4d:1b:a9:cf:39: 45:b0:c1:9f:bc:ab:5f:bc:1f:b3:e6:50:8a:76:0b:ac:65:2e: cf:fc:f6:1f:15:0a:95:05:4c:37:d5:ba:bd:4e:f3:14:58:e1: 39:cc:f4:fb:3e:d4:08:8b:41:a9:75:ce:b7:e8:07:de:ca:c0: 2b:a9:80:4e:95:d8:ea:20:60:39:eb:f1:55:d8:03:b4:cd:78: 49:98:83:6e:ba:2f:92:46:5e:54:ea:ab:1a:e9:2a:88:94:07: 1f:c0:7a:1e:aa:16:3d:5b:53:a5:c4:89:51:66:74:f5:4d:50: 6b:9e:ff:4a:03:6c:72:5b:03:15:ca:1a:7d:18:3c:54:8d:d5: c3:99:d1:51:41:46:ae:4e:95:2e:6f:8d:72:ca:ca:fd:11:2b: 28:2d:90:67:b3:90:81:5e:1d:ff:f3:07:a1:3d:b5:5f:f9:b8: 48:91:4e:f2 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaD8RrjKa5T97h0rAcTxHzUIMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDgyMWEzZjIxZmIwYzI5NGQ2ZDRhNTI5YjJmMWRiZDRiZDEx MTliZDcwHhcNMjYxMDAyMTEwMTI4WhcNMjYxMDAzMTEwMTI4WjAzMTEwLwYDVQQD EygzNTY1ZjQwYWFiN2MxYmEzYjVhY2JhOTc5ZjcxYWQ0YWE3YmU1MTZlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwW7xgCrcyDMKkcexw/JEbGdyFA5i rDrXQeu/N3bGuD+DX6b1JcZx8m4PAJMAafzSTtOPP9JiOmdbV8gA3Ey8GgWhrQMc AhCvZbiQt8VBIRS4l/XMzCVVCzw0uS6GgpwcFT3jcUiTTxADDG37My0m4gmbPo9t 4p76qJljLKoXJMq693nwbx1XgD4N151RBAkBNx2DzCRJC5LNHKpyCsRmxrn9m7R1 4HQoOb5nR9B7thFyceH9lU2B+qcowca/i52VwVGZfzLRzD6aOQv5nJUUOJPu5JWp ajcj3Sy0he4w/9gHWITYVat4pW3iN8MZm+J5X+IbtlrEZbVM6+ePgGr5fQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDVl9AqrfBujtay6l59xrUqnvlFuMB8GA1UdIwQY MBaAFIIaPyH7DClNbUpSmy8dvUvREZvXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZ2hvX0lmc01LVTF0U2xLYkx4MjlTOUVSbTljLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMi9lZGM4NTUtZjJiYy00ZTljLThjMGMt YjZmMmFjODZlZjI3LzEvZ2hvX0lmc01LVTF0U2xLYkx4MjlTOUVSbTljLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMi9lZGM4NTUtZjJiYy00ZTljLThjMGMtYjZmMmFjODZlZjI3 LzEvZ2hvX0lmc01LVTF0U2xLYkx4MjlTOUVSbTljLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADXwJ8A5J kZmi9WWT6ZFSlqbeDg+8kIPmLhdPgoOIxyp6gZVQ6GAnqlS/VJiMcTDpKBv8EoVp 9c0IH7UAcVFZBFfzomrHEUkazNdzpXxaofbLQEZ+b00bqc85RbDBn7yrX7wfs+ZQ inYLrGUuz/z2HxUKlQVMN9W6vU7zFFjhOcz0+z7UCItBqXXOt+gH3srAK6mATpXY 6iBgOevxVdgDtM14SZiDbrovkkZeVOqrGukqiJQHH8B6HqoWPVtTpcSJUWZ09U1Q a57/SgNsclsDFcoafRg8VI3Vw5nRUUFGrk6VLm+NcsrK/RErKC2QZ7OQgV4d//MH oT21X/m4SJFO8g== -----END CERTIFICATE-----Generated at Fri Oct 2 14:58:15 2026 by rpki-client