
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/12/edc855-f2bc-4e9c-8c0c-b6f2ac86ef27/1/gho_IfsMKU1tSlKbLx29S9ERm9c.mft
File: gho_IfsMKU1tSlKbLx29S9ERm9c.mft (raw, json)
Hash identifier: WpJQpRxfch/qDXHyZGVoWyhxZn3wbQUL5fuBl+v5Dx4=
Subject key identifier: 82:37:E3:28:DF:57:0B:79:DB:63:28:A1:40:44:EC:B7:41:6C:8C:BD
Authority key identifier: 82:1A:3F:21:FB:0C:29:4D:6D:4A:52:9B:2F:1D:BD:4B:D1:11:9B:D7
Certificate issuer: /CN=821a3f21fb0c294d6d4a529b2f1dbd4bd1119bd7
Certificate serial: 01A0DD608C9015687C26E716664F73310AFB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gho_IfsMKU1tSlKbLx29S9ERm9c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/edc855-f2bc-4e9c-8c0c-b6f2ac86ef27/1/gho_IfsMKU1tSlKbLx29S9ERm9c.mft
Manifest number: 14D9
Signing time: Sat 26 Sep 2026 11:01:27 +0000
Manifest this update: Sat 26 Sep 2026 11:01:27 +0000
Manifest next update: Sun 27 Sep 2026 11:01:27 +0000
Files and hashes: 1: 94DmWvO75aSCrTILT7xO5QfIZ4Q.roa (hash: yowEVWaH5JasWlMxUT7Mgz1/3iSP8rVz/KjlsGeBATs=)
2: I0ycopSi6_q86tsS_2ZsGMaSE7E.roa (hash: X5k67tgIigX44haykK5HKygDUVpwt1sPzwvIgtRhgUo=)
3: Lw_o47E9qYaZtJPZjp5m1M1e0_o.roa (hash: TnHpGib6gDq3lP3ubauOs2iA7D/xB8DKvaZF7GPTkuk=)
4: MRCItQ1B9948OVdVK1kL96AGPQI.roa (hash: ZQgpMxwvj3QAdwytn7kSRtX4MaK4Pcv8MlZ4Lzpi3Pg=)
5: OQ-6VTdp1vw9GrjNLFmvI9JYOrs.roa (hash: ZPmtBIJ2La5bnUm+sApv+AeoWDVjiZhyYSZEHB1jKmo=)
6: OxJM60qRQUOtdqYrv27xs3_kv9k.roa (hash: w3ZIUcbiJQn/X+ANNYduQprQtRgqv43tl64iIBJ+uVs=)
7: PujNlKftYzeQaE0MnZm0EPh4AFY.roa (hash: KOYoiHizuILiOcTb5DR0niku+PQ57DIf210w8rlbdQY=)
8: PyHODj5n0DejAoWrQZBIRXaXo6Y.roa (hash: 3ofBNW8DPxuvHoS9tkTr0YH1zUrrGyXEWYQ/aOGrjNI=)
9: RTPP9X2zvoR_qL8VtqZr6WEHKzw.roa (hash: bz39/MS5H8r1qd18PCFQ3+2kRu1MJoP1Vd1Xyr//BW0=)
10: WGYchnyCAbqQd8pzwZhRwcjvgv8.roa (hash: I9YjzWZ/pqf8yScr+6TqbtawBHd4EYuPwRC5bUBqVQw=)
11: Wz0IiveJRR3iZ_TFadI3Bt6mJJE.roa (hash: CImcnKPxhqg5cF+ps6Yupe+fhV0VE9C6rzuLTV7FS3Q=)
12: X2QsnfxAM9ScjVh_AzAztNDaXJg.roa (hash: L4YEdLYOkjYPPZMBRJDRYkJkVBQq0athDIG3eYPShmM=)
13: Z_IuqEKKfXuEOIP93u24e6BLk0E.roa (hash: 9YG/wmkjQ+naLweN0fWYFNb6KTTbRHlNigN8yWNOBNk=)
14: bjs_zJFuHzjoxK2NthqbKcV1s-8.roa (hash: Eg2O923oFj6n/iosVJD0SXVlsUTZEP0y964Jkw4vJR0=)
15: gho_IfsMKU1tSlKbLx29S9ERm9c.crl (hash: 19YPiz8EPnxPhozt7svA7+6ysuZh1b24EwdQecLW6kc=)
16: kELckgtwVoSvJeEmqDzRwJ_w8M4.roa (hash: ryrV6l1reh0IiB1vVcw5FXf5SQ2NaFZbF4Pl/NJCuQ4=)
17: u26dzWx1WsuAyPhRE3IG1GMmdJc.roa (hash: gEHPHjFqESUZPon7FHlszrJPYiDLqkhRmgKIOhvsfGY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/edc855-f2bc-4e9c-8c0c-b6f2ac86ef27/1/gho_IfsMKU1tSlKbLx29S9ERm9c.crl
rsync://rpki.ripe.net/repository/DEFAULT/12/edc855-f2bc-4e9c-8c0c-b6f2ac86ef27/1/gho_IfsMKU1tSlKbLx29S9ERm9c.mft
rsync://rpki.ripe.net/repository/DEFAULT/gho_IfsMKU1tSlKbLx29S9ERm9c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 11:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:dd:60:8c:90:15:68:7c:26:e7:16:66:4f:73:31:0a:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=821a3f21fb0c294d6d4a529b2f1dbd4bd1119bd7
Validity
Not Before: Sep 26 11:01:27 2026 GMT
Not After : Sep 27 11:01:27 2026 GMT
Subject: CN=8237e328df570b79db6328a14044ecb7416c8cbd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:ee:20:98:37:d5:69:5d:0c:82:51:9d:e5:21:
92:9d:eb:12:dc:2f:22:13:42:c6:a2:ed:3b:95:3f:
4f:32:cd:bb:db:78:29:9b:b0:26:86:c1:46:9e:c0:
01:4f:cf:8c:25:5e:2a:c3:85:1d:ea:04:29:de:df:
3c:2f:e5:6a:83:8e:02:a4:51:0a:d2:a3:37:13:90:
de:f0:82:e8:5a:23:ac:dc:ad:50:77:0d:07:6c:6e:
a8:9f:3c:84:7a:51:75:af:6e:d1:40:72:97:8d:99:
e6:3e:ce:47:9b:75:d3:ce:cd:59:a7:75:b4:c2:43:
5e:bc:a5:00:82:4b:86:9a:bf:ac:43:aa:87:9d:88:
42:9b:5d:b8:f6:bf:25:1a:b6:d3:58:a7:ab:2e:e6:
6c:a7:3d:bb:07:fb:89:bf:eb:76:b2:c5:d1:fb:e1:
5a:19:2a:51:07:bc:f0:63:42:b1:0b:d9:eb:21:2a:
10:c6:93:75:6f:bd:b0:c8:b3:5e:c2:6b:15:28:60:
82:b4:8f:d9:c8:9a:fe:fd:ba:77:fc:21:e5:c7:d3:
12:99:db:b5:2b:e6:a4:fa:0e:b1:6f:66:b1:5b:4c:
12:29:f9:fb:36:c8:7d:39:08:13:f8:19:a3:cc:ea:
c1:46:f2:45:5f:e5:0e:15:5e:11:ac:76:15:3a:c6:
b5:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:37:E3:28:DF:57:0B:79:DB:63:28:A1:40:44:EC:B7:41:6C:8C:BD
X509v3 Authority Key Identifier:
keyid:82:1A:3F:21:FB:0C:29:4D:6D:4A:52:9B:2F:1D:BD:4B:D1:11:9B:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gho_IfsMKU1tSlKbLx29S9ERm9c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/edc855-f2bc-4e9c-8c0c-b6f2ac86ef27/1/gho_IfsMKU1tSlKbLx29S9ERm9c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/edc855-f2bc-4e9c-8c0c-b6f2ac86ef27/1/gho_IfsMKU1tSlKbLx29S9ERm9c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a2:4a:0b:1e:15:00:1b:be:98:2a:96:11:4c:b2:57:91:bb:bb:
70:2e:77:52:be:77:0b:a0:00:34:55:37:a5:c6:e3:df:93:1a:
9d:b5:1f:8a:d1:01:7f:bd:ed:a1:5c:22:23:da:19:39:ff:05:
c4:8a:95:6d:f7:ec:af:d4:c3:fd:c5:09:96:2b:81:bc:a0:71:
7a:04:a4:36:a3:a8:ce:0b:f4:90:5e:30:69:57:75:93:f2:17:
16:b1:ee:88:a5:5e:2b:d9:08:52:ed:2c:e6:6b:c8:ac:d8:8d:
fb:b1:39:b7:92:8f:0f:d9:f8:f9:e9:e6:ee:a8:7e:fd:f6:02:
f7:4e:da:1e:29:f3:67:2c:5b:2b:f0:28:42:1c:c3:45:75:48:
28:91:c5:f9:02:f3:67:55:74:a7:09:61:be:dd:a1:2a:ea:e5:
63:0a:29:22:6c:8a:cd:41:04:1e:38:ea:86:f9:09:8c:62:a1:
bb:6e:09:39:f7:f8:86:5a:5f:15:d2:2b:81:1a:ae:80:6f:38:
2d:e8:89:6a:f9:eb:79:f3:8b:2b:c7:4d:03:6d:f0:cd:e1:da:
9b:ac:b8:0d:a4:c5:36:c6:42:3f:23:7c:ff:19:a8:d3:fd:bd:
b3:49:52:f2:83:eb:ab:3d:64:c3:76:84:1a:d2:fc:d0:7d:e6:
37:e8:11:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 20:16:17 2026 by rpki-client