
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/edc855-f2bc-4e9c-8c0c-b6f2ac86ef27/1/gho_IfsMKU1tSlKbLx29S9ERm9c.mft
File: gho_IfsMKU1tSlKbLx29S9ERm9c.mft (raw, json)
Hash identifier: gfiJELz5YmAppsLun+Pq904T6qL46LF1ua85baKSMFc=
Subject key identifier: 54:67:7A:48:25:53:2B:C4:80:6D:36:24:38:88:24:EC:D1:6C:CD:2C
Authority key identifier: 82:1A:3F:21:FB:0C:29:4D:6D:4A:52:9B:2F:1D:BD:4B:D1:11:9B:D7
Certificate issuer: /CN=821a3f21fb0c294d6d4a529b2f1dbd4bd1119bd7
Certificate serial: 01A00C29D1E9A5E93D7EE53BFD93099F8A61
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gho_IfsMKU1tSlKbLx29S9ERm9c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/edc855-f2bc-4e9c-8c0c-b6f2ac86ef27/1/gho_IfsMKU1tSlKbLx29S9ERm9c.mft
Manifest number: 146C
Signing time: Sun 16 Aug 2026 20:01:02 +0000
Manifest this update: Sun 16 Aug 2026 20:01:02 +0000
Manifest next update: Mon 17 Aug 2026 20:01:02 +0000
Files and hashes: 1: 94DmWvO75aSCrTILT7xO5QfIZ4Q.roa (hash: yowEVWaH5JasWlMxUT7Mgz1/3iSP8rVz/KjlsGeBATs=)
2: I0ycopSi6_q86tsS_2ZsGMaSE7E.roa (hash: X5k67tgIigX44haykK5HKygDUVpwt1sPzwvIgtRhgUo=)
3: Lw_o47E9qYaZtJPZjp5m1M1e0_o.roa (hash: TnHpGib6gDq3lP3ubauOs2iA7D/xB8DKvaZF7GPTkuk=)
4: MRCItQ1B9948OVdVK1kL96AGPQI.roa (hash: ZQgpMxwvj3QAdwytn7kSRtX4MaK4Pcv8MlZ4Lzpi3Pg=)
5: OQ-6VTdp1vw9GrjNLFmvI9JYOrs.roa (hash: ZPmtBIJ2La5bnUm+sApv+AeoWDVjiZhyYSZEHB1jKmo=)
6: OxJM60qRQUOtdqYrv27xs3_kv9k.roa (hash: w3ZIUcbiJQn/X+ANNYduQprQtRgqv43tl64iIBJ+uVs=)
7: PujNlKftYzeQaE0MnZm0EPh4AFY.roa (hash: KOYoiHizuILiOcTb5DR0niku+PQ57DIf210w8rlbdQY=)
8: PyHODj5n0DejAoWrQZBIRXaXo6Y.roa (hash: 3ofBNW8DPxuvHoS9tkTr0YH1zUrrGyXEWYQ/aOGrjNI=)
9: RTPP9X2zvoR_qL8VtqZr6WEHKzw.roa (hash: bz39/MS5H8r1qd18PCFQ3+2kRu1MJoP1Vd1Xyr//BW0=)
10: WGYchnyCAbqQd8pzwZhRwcjvgv8.roa (hash: I9YjzWZ/pqf8yScr+6TqbtawBHd4EYuPwRC5bUBqVQw=)
11: Wz0IiveJRR3iZ_TFadI3Bt6mJJE.roa (hash: CImcnKPxhqg5cF+ps6Yupe+fhV0VE9C6rzuLTV7FS3Q=)
12: X2QsnfxAM9ScjVh_AzAztNDaXJg.roa (hash: L4YEdLYOkjYPPZMBRJDRYkJkVBQq0athDIG3eYPShmM=)
13: Z_IuqEKKfXuEOIP93u24e6BLk0E.roa (hash: 9YG/wmkjQ+naLweN0fWYFNb6KTTbRHlNigN8yWNOBNk=)
14: gho_IfsMKU1tSlKbLx29S9ERm9c.crl (hash: l69z8Y322lGN12Wr+gJlvwpGDT8oVQeE3QIcRCLyTXM=)
15: kELckgtwVoSvJeEmqDzRwJ_w8M4.roa (hash: ryrV6l1reh0IiB1vVcw5FXf5SQ2NaFZbF4Pl/NJCuQ4=)
16: u26dzWx1WsuAyPhRE3IG1GMmdJc.roa (hash: gEHPHjFqESUZPon7FHlszrJPYiDLqkhRmgKIOhvsfGY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/edc855-f2bc-4e9c-8c0c-b6f2ac86ef27/1/gho_IfsMKU1tSlKbLx29S9ERm9c.crl
rsync://rpki.ripe.net/repository/DEFAULT/12/edc855-f2bc-4e9c-8c0c-b6f2ac86ef27/1/gho_IfsMKU1tSlKbLx29S9ERm9c.mft
rsync://rpki.ripe.net/repository/DEFAULT/gho_IfsMKU1tSlKbLx29S9ERm9c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Aug 2026 20:01:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:0c:29:d1:e9:a5:e9:3d:7e:e5:3b:fd:93:09:9f:8a:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=821a3f21fb0c294d6d4a529b2f1dbd4bd1119bd7
Validity
Not Before: Aug 16 20:01:02 2026 GMT
Not After : Aug 17 20:01:02 2026 GMT
Subject: CN=54677a4825532bc4806d3624388824ecd16ccd2c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:3a:32:c4:c4:9d:a3:cf:ff:4e:8e:76:a2:82:
cd:d5:3f:dc:f1:11:58:54:57:6a:12:4d:b0:ff:52:
5f:6e:0c:75:8e:67:67:3a:04:82:d0:cd:38:53:d1:
26:69:6f:27:bc:e2:40:fa:a6:87:e6:1c:2a:aa:bc:
c0:b6:21:7a:2e:60:22:fa:7d:33:8e:48:73:95:c9:
1d:32:e4:92:23:3d:c7:fa:e0:74:56:46:d2:4c:33:
c6:c9:b1:9f:9c:c0:6f:d0:a7:53:60:d2:cd:65:e9:
a6:e3:d1:75:80:41:ef:6f:f5:a2:c6:55:df:8f:d1:
17:fa:b6:87:16:78:25:c1:32:d7:62:62:78:e5:97:
00:ac:68:7b:9a:db:51:ac:8b:3c:7f:d6:92:68:87:
02:2d:0d:00:8c:2e:6b:6b:90:12:65:b8:2a:c9:22:
c1:1a:6a:fd:2b:82:6a:26:2c:34:04:20:5e:c1:3b:
59:86:98:1d:0d:65:3b:29:53:67:14:6b:57:fe:52:
73:ad:7d:c3:0a:11:20:09:b0:ca:e0:c7:70:f9:9d:
a0:0d:6f:08:27:05:97:41:ea:ef:cd:a7:30:52:57:
d9:f4:15:cd:c0:84:d9:67:e2:d6:4b:33:88:93:37:
36:90:72:72:8f:7e:ba:3c:2a:1d:f1:8a:06:69:dd:
4e:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:67:7A:48:25:53:2B:C4:80:6D:36:24:38:88:24:EC:D1:6C:CD:2C
X509v3 Authority Key Identifier:
keyid:82:1A:3F:21:FB:0C:29:4D:6D:4A:52:9B:2F:1D:BD:4B:D1:11:9B:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gho_IfsMKU1tSlKbLx29S9ERm9c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/edc855-f2bc-4e9c-8c0c-b6f2ac86ef27/1/gho_IfsMKU1tSlKbLx29S9ERm9c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/edc855-f2bc-4e9c-8c0c-b6f2ac86ef27/1/gho_IfsMKU1tSlKbLx29S9ERm9c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b5:12:c1:21:6c:c0:74:98:28:ba:be:db:b7:28:ac:ad:3c:b3:
47:18:42:40:0b:96:80:9f:4b:de:b2:c5:81:b5:27:e0:13:9f:
42:d0:2f:56:7d:26:aa:fa:e8:0b:26:e1:6f:7a:17:a2:21:e6:
5e:06:61:1e:60:f4:31:63:51:95:98:83:ba:92:91:4a:a1:0b:
e0:cb:af:56:99:6a:4a:5b:10:ef:cd:67:99:50:61:ea:bd:49:
36:3a:62:0b:fd:63:13:47:5e:c8:b8:34:d3:02:2e:af:84:e0:
ae:76:0d:a4:b3:02:f5:fc:03:e3:37:df:fd:bf:54:50:e4:53:
d5:9f:08:21:b8:c0:0a:84:1a:52:24:6d:2e:62:38:4a:8f:cb:
8d:fe:60:e8:0b:2e:5e:52:22:17:65:f0:87:25:64:f0:63:7a:
c6:99:42:b0:94:dd:0a:26:b9:20:d1:9a:f7:c9:9f:d1:cf:43:
de:f9:32:1d:47:6c:b1:3d:79:40:54:22:bf:07:b4:a7:4e:b8:
42:aa:6a:9d:45:d6:15:88:5a:65:c1:0e:e4:b5:38:19:fe:31:
db:c3:9f:e6:c4:3c:9a:e7:f3:a5:6c:03:49:10:b6:7b:61:f1:
e7:2c:14:02:e5:9b:85:da:86:be:0f:a2:81:26:e8:69:1d:9f:
96:66:82:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 17 02:16:00 2026 by rpki-client