$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/12/edc855-f2bc-4e9c-8c0c-b6f2ac86ef27/1/gho_IfsMKU1tSlKbLx29S9ERm9c.mft File: gho_IfsMKU1tSlKbLx29S9ERm9c.mft (raw, json) Hash identifier: WpJQpRxfch/qDXHyZGVoWyhxZn3wbQUL5fuBl+v5Dx4= Subject key identifier: 82:37:E3:28:DF:57:0B:79:DB:63:28:A1:40:44:EC:B7:41:6C:8C:BD Authority key identifier: 82:1A:3F:21:FB:0C:29:4D:6D:4A:52:9B:2F:1D:BD:4B:D1:11:9B:D7 Certificate issuer: /CN=821a3f21fb0c294d6d4a529b2f1dbd4bd1119bd7 Certificate serial: 01A0DD608C9015687C26E716664F73310AFB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gho_IfsMKU1tSlKbLx29S9ERm9c.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/edc855-f2bc-4e9c-8c0c-b6f2ac86ef27/1/gho_IfsMKU1tSlKbLx29S9ERm9c.mft Manifest number: 14D9 Signing time: Sat 26 Sep 2026 11:01:27 +0000 Manifest this update: Sat 26 Sep 2026 11:01:27 +0000 Manifest next update: Sun 27 Sep 2026 11:01:27 +0000 Files and hashes: 1: 94DmWvO75aSCrTILT7xO5QfIZ4Q.roa (hash: yowEVWaH5JasWlMxUT7Mgz1/3iSP8rVz/KjlsGeBATs=) 2: I0ycopSi6_q86tsS_2ZsGMaSE7E.roa (hash: X5k67tgIigX44haykK5HKygDUVpwt1sPzwvIgtRhgUo=) 3: Lw_o47E9qYaZtJPZjp5m1M1e0_o.roa (hash: TnHpGib6gDq3lP3ubauOs2iA7D/xB8DKvaZF7GPTkuk=) 4: MRCItQ1B9948OVdVK1kL96AGPQI.roa (hash: ZQgpMxwvj3QAdwytn7kSRtX4MaK4Pcv8MlZ4Lzpi3Pg=) 5: OQ-6VTdp1vw9GrjNLFmvI9JYOrs.roa (hash: ZPmtBIJ2La5bnUm+sApv+AeoWDVjiZhyYSZEHB1jKmo=) 6: OxJM60qRQUOtdqYrv27xs3_kv9k.roa (hash: w3ZIUcbiJQn/X+ANNYduQprQtRgqv43tl64iIBJ+uVs=) 7: PujNlKftYzeQaE0MnZm0EPh4AFY.roa (hash: KOYoiHizuILiOcTb5DR0niku+PQ57DIf210w8rlbdQY=) 8: PyHODj5n0DejAoWrQZBIRXaXo6Y.roa (hash: 3ofBNW8DPxuvHoS9tkTr0YH1zUrrGyXEWYQ/aOGrjNI=) 9: RTPP9X2zvoR_qL8VtqZr6WEHKzw.roa (hash: bz39/MS5H8r1qd18PCFQ3+2kRu1MJoP1Vd1Xyr//BW0=) 10: WGYchnyCAbqQd8pzwZhRwcjvgv8.roa (hash: I9YjzWZ/pqf8yScr+6TqbtawBHd4EYuPwRC5bUBqVQw=) 11: Wz0IiveJRR3iZ_TFadI3Bt6mJJE.roa (hash: CImcnKPxhqg5cF+ps6Yupe+fhV0VE9C6rzuLTV7FS3Q=) 12: X2QsnfxAM9ScjVh_AzAztNDaXJg.roa (hash: L4YEdLYOkjYPPZMBRJDRYkJkVBQq0athDIG3eYPShmM=) 13: Z_IuqEKKfXuEOIP93u24e6BLk0E.roa (hash: 9YG/wmkjQ+naLweN0fWYFNb6KTTbRHlNigN8yWNOBNk=) 14: bjs_zJFuHzjoxK2NthqbKcV1s-8.roa (hash: Eg2O923oFj6n/iosVJD0SXVlsUTZEP0y964Jkw4vJR0=) 15: gho_IfsMKU1tSlKbLx29S9ERm9c.crl (hash: 19YPiz8EPnxPhozt7svA7+6ysuZh1b24EwdQecLW6kc=) 16: kELckgtwVoSvJeEmqDzRwJ_w8M4.roa (hash: ryrV6l1reh0IiB1vVcw5FXf5SQ2NaFZbF4Pl/NJCuQ4=) 17: u26dzWx1WsuAyPhRE3IG1GMmdJc.roa (hash: gEHPHjFqESUZPon7FHlszrJPYiDLqkhRmgKIOhvsfGY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/edc855-f2bc-4e9c-8c0c-b6f2ac86ef27/1/gho_IfsMKU1tSlKbLx29S9ERm9c.crl rsync://rpki.ripe.net/repository/DEFAULT/12/edc855-f2bc-4e9c-8c0c-b6f2ac86ef27/1/gho_IfsMKU1tSlKbLx29S9ERm9c.mft rsync://rpki.ripe.net/repository/DEFAULT/gho_IfsMKU1tSlKbLx29S9ERm9c.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 27 Sep 2026 11:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a0:dd:60:8c:90:15:68:7c:26:e7:16:66:4f:73:31:0a:fb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=821a3f21fb0c294d6d4a529b2f1dbd4bd1119bd7 Validity Not Before: Sep 26 11:01:27 2026 GMT Not After : Sep 27 11:01:27 2026 GMT Subject: CN=8237e328df570b79db6328a14044ecb7416c8cbd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:ee:20:98:37:d5:69:5d:0c:82:51:9d:e5:21: 92:9d:eb:12:dc:2f:22:13:42:c6:a2:ed:3b:95:3f: 4f:32:cd:bb:db:78:29:9b:b0:26:86:c1:46:9e:c0: 01:4f:cf:8c:25:5e:2a:c3:85:1d:ea:04:29:de:df: 3c:2f:e5:6a:83:8e:02:a4:51:0a:d2:a3:37:13:90: de:f0:82:e8:5a:23:ac:dc:ad:50:77:0d:07:6c:6e: a8:9f:3c:84:7a:51:75:af:6e:d1:40:72:97:8d:99: e6:3e:ce:47:9b:75:d3:ce:cd:59:a7:75:b4:c2:43: 5e:bc:a5:00:82:4b:86:9a:bf:ac:43:aa:87:9d:88: 42:9b:5d:b8:f6:bf:25:1a:b6:d3:58:a7:ab:2e:e6: 6c:a7:3d:bb:07:fb:89:bf:eb:76:b2:c5:d1:fb:e1: 5a:19:2a:51:07:bc:f0:63:42:b1:0b:d9:eb:21:2a: 10:c6:93:75:6f:bd:b0:c8:b3:5e:c2:6b:15:28:60: 82:b4:8f:d9:c8:9a:fe:fd:ba:77:fc:21:e5:c7:d3: 12:99:db:b5:2b:e6:a4:fa:0e:b1:6f:66:b1:5b:4c: 12:29:f9:fb:36:c8:7d:39:08:13:f8:19:a3:cc:ea: c1:46:f2:45:5f:e5:0e:15:5e:11:ac:76:15:3a:c6: b5:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:37:E3:28:DF:57:0B:79:DB:63:28:A1:40:44:EC:B7:41:6C:8C:BD X509v3 Authority Key Identifier: keyid:82:1A:3F:21:FB:0C:29:4D:6D:4A:52:9B:2F:1D:BD:4B:D1:11:9B:D7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gho_IfsMKU1tSlKbLx29S9ERm9c.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/edc855-f2bc-4e9c-8c0c-b6f2ac86ef27/1/gho_IfsMKU1tSlKbLx29S9ERm9c.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/12/edc855-f2bc-4e9c-8c0c-b6f2ac86ef27/1/gho_IfsMKU1tSlKbLx29S9ERm9c.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a2:4a:0b:1e:15:00:1b:be:98:2a:96:11:4c:b2:57:91:bb:bb: 70:2e:77:52:be:77:0b:a0:00:34:55:37:a5:c6:e3:df:93:1a: 9d:b5:1f:8a:d1:01:7f:bd:ed:a1:5c:22:23:da:19:39:ff:05: c4:8a:95:6d:f7:ec:af:d4:c3:fd:c5:09:96:2b:81:bc:a0:71: 7a:04:a4:36:a3:a8:ce:0b:f4:90:5e:30:69:57:75:93:f2:17: 16:b1:ee:88:a5:5e:2b:d9:08:52:ed:2c:e6:6b:c8:ac:d8:8d: fb:b1:39:b7:92:8f:0f:d9:f8:f9:e9:e6:ee:a8:7e:fd:f6:02: f7:4e:da:1e:29:f3:67:2c:5b:2b:f0:28:42:1c:c3:45:75:48: 28:91:c5:f9:02:f3:67:55:74:a7:09:61:be:dd:a1:2a:ea:e5: 63:0a:29:22:6c:8a:cd:41:04:1e:38:ea:86:f9:09:8c:62:a1: bb:6e:09:39:f7:f8:86:5a:5f:15:d2:2b:81:1a:ae:80:6f:38: 2d:e8:89:6a:f9:eb:79:f3:8b:2b:c7:4d:03:6d:f0:cd:e1:da: 9b:ac:b8:0d:a4:c5:36:c6:42:3f:23:7c:ff:19:a8:d3:fd:bd: b3:49:52:f2:83:eb:ab:3d:64:c3:76:84:1a:d2:fc:d0:7d:e6: 37:e8:11:19 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaDdYIyQFWh8JucWZk9zMQr7MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDgyMWEzZjIxZmIwYzI5NGQ2ZDRhNTI5YjJmMWRiZDRiZDEx MTliZDcwHhcNMjYwOTI2MTEwMTI3WhcNMjYwOTI3MTEwMTI3WjAzMTEwLwYDVQQD Eyg4MjM3ZTMyOGRmNTcwYjc5ZGI2MzI4YTE0MDQ0ZWNiNzQxNmM4Y2JkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqu4gmDfVaV0MglGd5SGSnesS3C8i E0LGou07lT9PMs2723gpm7AmhsFGnsABT8+MJV4qw4Ud6gQp3t88L+Vqg44CpFEK 0qM3E5De8ILoWiOs3K1Qdw0HbG6onzyEelF1r27RQHKXjZnmPs5Hm3XTzs1Zp3W0 wkNevKUAgkuGmr+sQ6qHnYhCm1249r8lGrbTWKerLuZspz27B/uJv+t2ssXR++Fa GSpRB7zwY0KxC9nrISoQxpN1b72wyLNewmsVKGCCtI/ZyJr+/bp3/CHlx9MSmdu1 K+ak+g6xb2axW0wSKfn7Nsh9OQgT+BmjzOrBRvJFX+UOFV4RrHYVOsa13wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFII34yjfVwt522MooUBE7LdBbIy9MB8GA1UdIwQY MBaAFIIaPyH7DClNbUpSmy8dvUvREZvXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZ2hvX0lmc01LVTF0U2xLYkx4MjlTOUVSbTljLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMi9lZGM4NTUtZjJiYy00ZTljLThjMGMt YjZmMmFjODZlZjI3LzEvZ2hvX0lmc01LVTF0U2xLYkx4MjlTOUVSbTljLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMi9lZGM4NTUtZjJiYy00ZTljLThjMGMtYjZmMmFjODZlZjI3 LzEvZ2hvX0lmc01LVTF0U2xLYkx4MjlTOUVSbTljLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAokoLHhUA G76YKpYRTLJXkbu7cC53Ur53C6AANFU3pcbj35ManbUfitEBf73toVwiI9oZOf8F xIqVbffsr9TD/cUJliuBvKBxegSkNqOozgv0kF4waVd1k/IXFrHuiKVeK9kIUu0s 5mvIrNiN+7E5t5KPD9n4+enm7qh+/fYC907aHinzZyxbK/AoQhzDRXVIKJHF+QLz Z1V0pwlhvt2hKurlYwopImyKzUEEHjjqhvkJjGKhu24JOff4hlpfFdIrgRqugG84 LeiJavnrefOLK8dNA23wzeHam6y4DaTFNsZCPyN8/xmo0/29s0lS8oPrqz1kw3aE GtL80H3mN+gRGQ== -----END CERTIFICATE-----Generated at Sat Sep 26 20:16:17 2026 by rpki-client