
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/12/edc855-f2bc-4e9c-8c0c-b6f2ac86ef27/1/gho_IfsMKU1tSlKbLx29S9ERm9c.mft
File: gho_IfsMKU1tSlKbLx29S9ERm9c.mft (raw, json)
Hash identifier: dUswdDcmr/4LOg6Ixsy7jPWrgHwP8wXrEtaQ5J+6bvY=
Subject key identifier: 6F:5A:94:42:8E:DC:3B:6B:BA:81:12:C9:02:78:05:FC:3D:6D:02:CD
Authority key identifier: 82:1A:3F:21:FB:0C:29:4D:6D:4A:52:9B:2F:1D:BD:4B:D1:11:9B:D7
Certificate issuer: /CN=821a3f21fb0c294d6d4a529b2f1dbd4bd1119bd7
Certificate serial: 01A11B2BC9567AA65740723305D5E1E56431
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gho_IfsMKU1tSlKbLx29S9ERm9c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/edc855-f2bc-4e9c-8c0c-b6f2ac86ef27/1/gho_IfsMKU1tSlKbLx29S9ERm9c.mft
Manifest number: 14F9
Signing time: Thu 08 Oct 2026 11:00:16 +0000
Manifest this update: Thu 08 Oct 2026 11:00:16 +0000
Manifest next update: Fri 09 Oct 2026 11:00:16 +0000
Files and hashes: 1: 94DmWvO75aSCrTILT7xO5QfIZ4Q.roa (hash: yowEVWaH5JasWlMxUT7Mgz1/3iSP8rVz/KjlsGeBATs=)
2: I0ycopSi6_q86tsS_2ZsGMaSE7E.roa (hash: X5k67tgIigX44haykK5HKygDUVpwt1sPzwvIgtRhgUo=)
3: Lw_o47E9qYaZtJPZjp5m1M1e0_o.roa (hash: TnHpGib6gDq3lP3ubauOs2iA7D/xB8DKvaZF7GPTkuk=)
4: MRCItQ1B9948OVdVK1kL96AGPQI.roa (hash: ZQgpMxwvj3QAdwytn7kSRtX4MaK4Pcv8MlZ4Lzpi3Pg=)
5: OQ-6VTdp1vw9GrjNLFmvI9JYOrs.roa (hash: ZPmtBIJ2La5bnUm+sApv+AeoWDVjiZhyYSZEHB1jKmo=)
6: OxJM60qRQUOtdqYrv27xs3_kv9k.roa (hash: w3ZIUcbiJQn/X+ANNYduQprQtRgqv43tl64iIBJ+uVs=)
7: PujNlKftYzeQaE0MnZm0EPh4AFY.roa (hash: KOYoiHizuILiOcTb5DR0niku+PQ57DIf210w8rlbdQY=)
8: PyHODj5n0DejAoWrQZBIRXaXo6Y.roa (hash: 3ofBNW8DPxuvHoS9tkTr0YH1zUrrGyXEWYQ/aOGrjNI=)
9: RTPP9X2zvoR_qL8VtqZr6WEHKzw.roa (hash: bz39/MS5H8r1qd18PCFQ3+2kRu1MJoP1Vd1Xyr//BW0=)
10: WGYchnyCAbqQd8pzwZhRwcjvgv8.roa (hash: I9YjzWZ/pqf8yScr+6TqbtawBHd4EYuPwRC5bUBqVQw=)
11: Wz0IiveJRR3iZ_TFadI3Bt6mJJE.roa (hash: CImcnKPxhqg5cF+ps6Yupe+fhV0VE9C6rzuLTV7FS3Q=)
12: X2QsnfxAM9ScjVh_AzAztNDaXJg.roa (hash: L4YEdLYOkjYPPZMBRJDRYkJkVBQq0athDIG3eYPShmM=)
13: Z_IuqEKKfXuEOIP93u24e6BLk0E.roa (hash: 9YG/wmkjQ+naLweN0fWYFNb6KTTbRHlNigN8yWNOBNk=)
14: bjs_zJFuHzjoxK2NthqbKcV1s-8.roa (hash: Eg2O923oFj6n/iosVJD0SXVlsUTZEP0y964Jkw4vJR0=)
15: gho_IfsMKU1tSlKbLx29S9ERm9c.crl (hash: ILGeY1q8ZrVzt7SRB9ERa4E/FZ21iPzmXsQfo4O6u5M=)
16: kELckgtwVoSvJeEmqDzRwJ_w8M4.roa (hash: ryrV6l1reh0IiB1vVcw5FXf5SQ2NaFZbF4Pl/NJCuQ4=)
17: u26dzWx1WsuAyPhRE3IG1GMmdJc.roa (hash: gEHPHjFqESUZPon7FHlszrJPYiDLqkhRmgKIOhvsfGY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/edc855-f2bc-4e9c-8c0c-b6f2ac86ef27/1/gho_IfsMKU1tSlKbLx29S9ERm9c.crl
rsync://rpki.ripe.net/repository/DEFAULT/12/edc855-f2bc-4e9c-8c0c-b6f2ac86ef27/1/gho_IfsMKU1tSlKbLx29S9ERm9c.mft
rsync://rpki.ripe.net/repository/DEFAULT/gho_IfsMKU1tSlKbLx29S9ERm9c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 09 Oct 2026 11:00:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:1b:2b:c9:56:7a:a6:57:40:72:33:05:d5:e1:e5:64:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=821a3f21fb0c294d6d4a529b2f1dbd4bd1119bd7
Validity
Not Before: Oct 8 11:00:16 2026 GMT
Not After : Oct 9 11:00:16 2026 GMT
Subject: CN=6f5a94428edc3b6bba8112c9027805fc3d6d02cd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:c1:ef:f9:90:7b:2b:43:53:53:b8:66:38:cd:
5e:b1:b4:78:ee:6b:f7:76:3d:d6:6c:7c:ed:b1:fb:
0d:6d:ec:a1:ad:5b:7c:30:ed:64:65:77:85:dc:a5:
6c:74:0c:7c:2f:c4:63:44:79:6f:4e:7d:09:8f:eb:
27:37:99:b2:e8:e5:68:97:b3:61:05:43:d7:0e:0b:
1c:f2:41:a4:3a:bb:74:97:16:11:89:b6:24:14:a8:
a2:d3:a2:90:20:52:e0:64:06:e3:39:ec:a2:28:e1:
7e:e3:96:5e:8f:ab:ec:c1:5c:9d:ac:6f:c8:c5:e7:
2c:3f:b5:f4:63:b2:37:27:ae:02:8b:a3:dd:45:39:
51:a9:8e:c9:47:df:a5:5a:2c:69:3f:b7:a7:84:8e:
f2:45:25:81:f6:fa:9d:7d:a6:7a:57:3b:87:48:60:
06:c6:9d:1a:b7:82:4d:5f:3d:b2:1d:dd:1e:6c:99:
dc:ab:ac:f8:19:ca:9d:88:61:6a:52:6f:39:1d:6d:
81:d6:d6:54:f2:1b:99:1c:b9:29:13:a6:0c:10:12:
db:b1:15:08:5a:65:b9:ab:5e:21:f0:6c:5d:ec:ac:
49:55:8b:55:91:c1:47:0c:b9:53:4e:3e:65:a0:93:
74:10:ca:98:5d:41:b1:4d:41:a9:66:17:f6:9d:32:
9e:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:5A:94:42:8E:DC:3B:6B:BA:81:12:C9:02:78:05:FC:3D:6D:02:CD
X509v3 Authority Key Identifier:
keyid:82:1A:3F:21:FB:0C:29:4D:6D:4A:52:9B:2F:1D:BD:4B:D1:11:9B:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gho_IfsMKU1tSlKbLx29S9ERm9c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/edc855-f2bc-4e9c-8c0c-b6f2ac86ef27/1/gho_IfsMKU1tSlKbLx29S9ERm9c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/edc855-f2bc-4e9c-8c0c-b6f2ac86ef27/1/gho_IfsMKU1tSlKbLx29S9ERm9c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b7:15:d4:f6:88:bd:6d:54:1c:46:98:a2:e5:97:fa:c6:b3:6a:
91:d1:a5:94:d9:42:5d:ec:86:2c:0d:13:94:43:14:82:4f:bd:
b1:d7:e4:6a:d2:25:10:20:0a:9b:9e:b3:b7:8a:83:9d:57:e9:
f2:f6:3d:1d:ba:77:3c:b6:a4:12:1c:ed:b6:1d:ef:71:76:e3:
b4:8c:ce:cb:42:02:c2:20:3d:74:88:4f:2b:22:cf:3b:e1:69:
7c:8a:a8:0d:56:7f:68:c4:1c:9b:aa:32:c9:58:65:c3:01:cf:
53:57:8f:4e:c4:14:f1:23:e1:42:45:a0:b3:4d:62:40:14:ed:
96:49:94:cf:de:ca:27:ad:6f:78:63:66:b4:c6:65:26:62:08:
00:be:e2:eb:12:0e:6f:e4:fe:de:0f:3c:ca:29:4f:f5:f8:a3:
26:e8:ae:b4:10:35:63:07:a8:49:84:3a:5b:a4:60:31:aa:95:
3f:3f:44:9c:db:ea:c2:00:6d:0b:38:f2:1d:7b:c0:09:ce:72:
4f:01:00:9e:62:8f:88:82:f9:1f:d9:c2:48:b6:15:af:99:30:
88:3c:fd:2c:2a:b5:ca:26:a9:d2:17:09:dd:33:df:22:d2:eb:
ce:69:45:7b:b0:7d:db:8e:7e:67:33:05:0e:5d:f2:c0:0e:61:
f7:88:47:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 20:56:51 2026 by rpki-client