$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/12/edc855-f2bc-4e9c-8c0c-b6f2ac86ef27/1/gho_IfsMKU1tSlKbLx29S9ERm9c.mft File: gho_IfsMKU1tSlKbLx29S9ERm9c.mft (raw, json) Hash identifier: Mj9rydQK5Z9BJ3edRVFIMvi4zGEvIMjBLuL9iSMpiYs= Subject key identifier: 3A:FE:89:66:5E:D3:4E:7D:B9:2B:3A:C7:6E:F2:18:92:82:89:BA:0C Authority key identifier: 82:1A:3F:21:FB:0C:29:4D:6D:4A:52:9B:2F:1D:BD:4B:D1:11:9B:D7 Certificate issuer: /CN=821a3f21fb0c294d6d4a529b2f1dbd4bd1119bd7 Certificate serial: 01A14985AD6D48E20D401D6C8F4D974BCF11 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gho_IfsMKU1tSlKbLx29S9ERm9c.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/edc855-f2bc-4e9c-8c0c-b6f2ac86ef27/1/gho_IfsMKU1tSlKbLx29S9ERm9c.mft Manifest number: 1511 Signing time: Sat 17 Oct 2026 11:00:59 +0000 Manifest this update: Sat 17 Oct 2026 11:00:59 +0000 Manifest next update: Sun 18 Oct 2026 11:00:59 +0000 Files and hashes: 1: 94DmWvO75aSCrTILT7xO5QfIZ4Q.roa (hash: yowEVWaH5JasWlMxUT7Mgz1/3iSP8rVz/KjlsGeBATs=) 2: I0ycopSi6_q86tsS_2ZsGMaSE7E.roa (hash: X5k67tgIigX44haykK5HKygDUVpwt1sPzwvIgtRhgUo=) 3: Lw_o47E9qYaZtJPZjp5m1M1e0_o.roa (hash: TnHpGib6gDq3lP3ubauOs2iA7D/xB8DKvaZF7GPTkuk=) 4: MRCItQ1B9948OVdVK1kL96AGPQI.roa (hash: ZQgpMxwvj3QAdwytn7kSRtX4MaK4Pcv8MlZ4Lzpi3Pg=) 5: OQ-6VTdp1vw9GrjNLFmvI9JYOrs.roa (hash: ZPmtBIJ2La5bnUm+sApv+AeoWDVjiZhyYSZEHB1jKmo=) 6: OxJM60qRQUOtdqYrv27xs3_kv9k.roa (hash: w3ZIUcbiJQn/X+ANNYduQprQtRgqv43tl64iIBJ+uVs=) 7: PujNlKftYzeQaE0MnZm0EPh4AFY.roa (hash: KOYoiHizuILiOcTb5DR0niku+PQ57DIf210w8rlbdQY=) 8: PyHODj5n0DejAoWrQZBIRXaXo6Y.roa (hash: 3ofBNW8DPxuvHoS9tkTr0YH1zUrrGyXEWYQ/aOGrjNI=) 9: RTPP9X2zvoR_qL8VtqZr6WEHKzw.roa (hash: bz39/MS5H8r1qd18PCFQ3+2kRu1MJoP1Vd1Xyr//BW0=) 10: WGYchnyCAbqQd8pzwZhRwcjvgv8.roa (hash: I9YjzWZ/pqf8yScr+6TqbtawBHd4EYuPwRC5bUBqVQw=) 11: Wz0IiveJRR3iZ_TFadI3Bt6mJJE.roa (hash: CImcnKPxhqg5cF+ps6Yupe+fhV0VE9C6rzuLTV7FS3Q=) 12: X2QsnfxAM9ScjVh_AzAztNDaXJg.roa (hash: L4YEdLYOkjYPPZMBRJDRYkJkVBQq0athDIG3eYPShmM=) 13: Z_IuqEKKfXuEOIP93u24e6BLk0E.roa (hash: 9YG/wmkjQ+naLweN0fWYFNb6KTTbRHlNigN8yWNOBNk=) 14: bjs_zJFuHzjoxK2NthqbKcV1s-8.roa (hash: Eg2O923oFj6n/iosVJD0SXVlsUTZEP0y964Jkw4vJR0=) 15: gho_IfsMKU1tSlKbLx29S9ERm9c.crl (hash: p3K9fZ+KBr0HTD3x7tLdg1wpgHi+F4xKKsXd91nEDTk=) 16: kELckgtwVoSvJeEmqDzRwJ_w8M4.roa (hash: ryrV6l1reh0IiB1vVcw5FXf5SQ2NaFZbF4Pl/NJCuQ4=) 17: u26dzWx1WsuAyPhRE3IG1GMmdJc.roa (hash: gEHPHjFqESUZPon7FHlszrJPYiDLqkhRmgKIOhvsfGY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/edc855-f2bc-4e9c-8c0c-b6f2ac86ef27/1/gho_IfsMKU1tSlKbLx29S9ERm9c.crl rsync://rpki.ripe.net/repository/DEFAULT/12/edc855-f2bc-4e9c-8c0c-b6f2ac86ef27/1/gho_IfsMKU1tSlKbLx29S9ERm9c.mft rsync://rpki.ripe.net/repository/DEFAULT/gho_IfsMKU1tSlKbLx29S9ERm9c.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 18 Oct 2026 11:00:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a1:49:85:ad:6d:48:e2:0d:40:1d:6c:8f:4d:97:4b:cf:11 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=821a3f21fb0c294d6d4a529b2f1dbd4bd1119bd7 Validity Not Before: Oct 17 11:00:59 2026 GMT Not After : Oct 18 11:00:59 2026 GMT Subject: CN=3afe89665ed34e7db92b3ac76ef218928289ba0c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:6a:53:07:2e:b3:18:90:35:ce:be:3e:04:5b: 4e:ac:8e:0f:6b:f7:c8:cf:92:96:d2:f5:38:f7:80: 05:79:98:a6:a0:cd:b1:8b:03:b5:e5:b9:f3:aa:c7: ae:36:f8:37:1d:4c:fa:82:e1:d6:c3:a0:27:c4:96: d0:80:bd:ca:61:9a:2c:fc:05:a9:ad:7e:07:ab:ff: 43:51:99:d3:a0:c6:7b:d7:de:08:ab:9b:0a:f0:ea: 31:5a:92:6d:d6:17:22:da:2c:3b:9e:53:99:67:c6: ce:2d:8c:93:61:f9:82:23:b8:d4:50:01:19:75:f3: ed:70:d4:b4:77:6a:b0:51:c4:f3:97:18:a1:ac:dd: 00:87:e7:df:1a:c8:a4:ec:7b:d6:87:67:c3:20:9d: 47:8e:90:78:0f:16:eb:53:97:2a:9b:4e:02:8c:b9: ef:09:a6:9f:05:36:25:6b:6f:f1:47:17:59:f2:67: 85:9f:79:bd:24:d9:08:04:80:04:2d:76:a1:c6:31: 02:8d:82:13:29:ac:45:20:ce:2c:8d:f8:0e:ed:44: 69:8e:e7:44:0d:a7:dc:b4:42:ef:d3:80:31:db:cb: 61:b0:42:06:b7:63:b1:7b:8f:f2:9a:c5:a4:6a:f5: 1a:99:ee:6f:94:f5:62:1a:93:38:b2:da:09:e2:34: ce:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:FE:89:66:5E:D3:4E:7D:B9:2B:3A:C7:6E:F2:18:92:82:89:BA:0C X509v3 Authority Key Identifier: keyid:82:1A:3F:21:FB:0C:29:4D:6D:4A:52:9B:2F:1D:BD:4B:D1:11:9B:D7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gho_IfsMKU1tSlKbLx29S9ERm9c.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/edc855-f2bc-4e9c-8c0c-b6f2ac86ef27/1/gho_IfsMKU1tSlKbLx29S9ERm9c.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/12/edc855-f2bc-4e9c-8c0c-b6f2ac86ef27/1/gho_IfsMKU1tSlKbLx29S9ERm9c.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 76:9a:70:5e:eb:4c:3d:d6:cb:c8:48:1d:12:08:fa:86:66:57: e7:66:89:6f:da:2b:83:e5:7e:1f:b5:57:43:51:af:c3:98:e4: f2:74:ff:c1:e0:d5:bb:68:5a:e0:f9:e0:5f:87:5f:4c:24:bf: dc:9e:1f:1b:69:d0:7f:a9:12:6c:37:ab:50:8f:fb:34:0a:17: 15:4f:5f:ba:ba:15:f7:1b:5b:01:97:fd:ac:79:11:d0:b9:fe: 1f:73:73:d3:07:f3:60:a1:e0:66:3d:41:01:f7:2e:66:36:e7: 83:63:0d:3b:cc:3b:e4:57:63:ee:78:2d:a3:cc:58:c0:38:2c: 14:40:4d:3b:8b:45:eb:b2:17:2c:6b:ff:30:bd:87:6a:db:0c: a1:be:25:d4:ae:da:c5:84:77:2c:13:a0:b8:8c:14:2b:b7:19: 22:e4:3b:06:18:dc:3e:e3:ba:50:74:87:e4:86:f1:34:e6:a0: b9:8a:0c:26:fe:49:64:c7:fb:40:30:66:e7:40:75:73:9f:9a: 97:42:e2:c8:d0:95:6d:c4:15:fd:64:e8:8d:8b:0a:0a:68:f2: 34:9e:8c:fa:4a:6e:61:e8:60:e5:da:81:65:13:3d:ae:60:b8: a7:d2:dd:c1:21:45:95:04:6d:7c:10:00:76:ed:1e:4f:24:79: 47:71:c6:7e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaFJha1tSOINQB1sj02XS88RMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDgyMWEzZjIxZmIwYzI5NGQ2ZDRhNTI5YjJmMWRiZDRiZDEx MTliZDcwHhcNMjYxMDE3MTEwMDU5WhcNMjYxMDE4MTEwMDU5WjAzMTEwLwYDVQQD EygzYWZlODk2NjVlZDM0ZTdkYjkyYjNhYzc2ZWYyMTg5MjgyODliYTBjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqGpTBy6zGJA1zr4+BFtOrI4Pa/fI z5KW0vU494AFeZimoM2xiwO15bnzqseuNvg3HUz6guHWw6AnxJbQgL3KYZos/AWp rX4Hq/9DUZnToMZ7194Iq5sK8OoxWpJt1hci2iw7nlOZZ8bOLYyTYfmCI7jUUAEZ dfPtcNS0d2qwUcTzlxihrN0Ah+ffGsik7HvWh2fDIJ1HjpB4DxbrU5cqm04CjLnv CaafBTYla2/xRxdZ8meFn3m9JNkIBIAELXahxjECjYITKaxFIM4sjfgO7URpjudE DafctELv04Ax28thsEIGt2Oxe4/ymsWkavUame5vlPViGpM4stoJ4jTOKwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDr+iWZe0059uSs6x27yGJKCiboMMB8GA1UdIwQY MBaAFIIaPyH7DClNbUpSmy8dvUvREZvXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZ2hvX0lmc01LVTF0U2xLYkx4MjlTOUVSbTljLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMi9lZGM4NTUtZjJiYy00ZTljLThjMGMt YjZmMmFjODZlZjI3LzEvZ2hvX0lmc01LVTF0U2xLYkx4MjlTOUVSbTljLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMi9lZGM4NTUtZjJiYy00ZTljLThjMGMtYjZmMmFjODZlZjI3 LzEvZ2hvX0lmc01LVTF0U2xLYkx4MjlTOUVSbTljLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdppwXutM PdbLyEgdEgj6hmZX52aJb9org+V+H7VXQ1Gvw5jk8nT/weDVu2ha4PngX4dfTCS/ 3J4fG2nQf6kSbDerUI/7NAoXFU9furoV9xtbAZf9rHkR0Ln+H3Nz0wfzYKHgZj1B AfcuZjbng2MNO8w75Fdj7ngto8xYwDgsFEBNO4tF67IXLGv/ML2HatsMob4l1K7a xYR3LBOguIwUK7cZIuQ7BhjcPuO6UHSH5IbxNOaguYoMJv5JZMf7QDBm50B1c5+a l0LiyNCVbcQV/WTojYsKCmjyNJ6M+kpuYehg5dqBZRM9rmC4p9LdwSFFlQRtfBAA du0eTyR5R3HGfg== -----END CERTIFICATE-----Generated at Sat Oct 17 20:15:01 2026 by rpki-client