$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/12/edc855-f2bc-4e9c-8c0c-b6f2ac86ef27/1/gho_IfsMKU1tSlKbLx29S9ERm9c.mft File: gho_IfsMKU1tSlKbLx29S9ERm9c.mft (raw, json) Hash identifier: dfT/o9rXNsy4Bj5IFcIzGGoq5aKVqAP9DHggJHgHxfg= Subject key identifier: 79:60:E5:62:91:11:88:49:A8:F7:EF:72:3C:53:8F:CC:7B:92:34:AA Authority key identifier: 82:1A:3F:21:FB:0C:29:4D:6D:4A:52:9B:2F:1D:BD:4B:D1:11:9B:D7 Certificate issuer: /CN=821a3f21fb0c294d6d4a529b2f1dbd4bd1119bd7 Certificate serial: 01A1DCB9256993AE2DA0D8ACB55C76DEEBF7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gho_IfsMKU1tSlKbLx29S9ERm9c.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/edc855-f2bc-4e9c-8c0c-b6f2ac86ef27/1/gho_IfsMKU1tSlKbLx29S9ERm9c.mft Manifest number: 1561 Signing time: Sun 15 Nov 2026 01:01:23 +0000 Manifest this update: Sun 15 Nov 2026 01:01:23 +0000 Manifest next update: Mon 16 Nov 2026 01:01:23 +0000 Files and hashes: 1: 30X_KW6YLs744xLoa5wGwmIpQfE.roa (hash: a3qfn+8/hDvXfqz7+ugtWciS2tAe8+s5ZtIIMLZ+zVI=) 2: 3uI5lQRkJpip0g2Yf5nrOxnpcps.roa (hash: Jrv7cJG1MMoAzxus2BXaB2YNBDsOS6rV68Paas64eu4=) 3: 94DmWvO75aSCrTILT7xO5QfIZ4Q.roa (hash: yowEVWaH5JasWlMxUT7Mgz1/3iSP8rVz/KjlsGeBATs=) 4: Lw_o47E9qYaZtJPZjp5m1M1e0_o.roa (hash: TnHpGib6gDq3lP3ubauOs2iA7D/xB8DKvaZF7GPTkuk=) 5: MRCItQ1B9948OVdVK1kL96AGPQI.roa (hash: ZQgpMxwvj3QAdwytn7kSRtX4MaK4Pcv8MlZ4Lzpi3Pg=) 6: OM-ZUuhtFfEbzEKe1saj5HWlSS8.roa (hash: dCqQ/qpl5rIhH4UzeW/Kln8+INSyixdogETHSosIE5g=) 7: OQ-6VTdp1vw9GrjNLFmvI9JYOrs.roa (hash: ZPmtBIJ2La5bnUm+sApv+AeoWDVjiZhyYSZEHB1jKmo=) 8: OxJM60qRQUOtdqYrv27xs3_kv9k.roa (hash: w3ZIUcbiJQn/X+ANNYduQprQtRgqv43tl64iIBJ+uVs=) 9: PyHODj5n0DejAoWrQZBIRXaXo6Y.roa (hash: 3ofBNW8DPxuvHoS9tkTr0YH1zUrrGyXEWYQ/aOGrjNI=) 10: RTPP9X2zvoR_qL8VtqZr6WEHKzw.roa (hash: bz39/MS5H8r1qd18PCFQ3+2kRu1MJoP1Vd1Xyr//BW0=) 11: WGYchnyCAbqQd8pzwZhRwcjvgv8.roa (hash: I9YjzWZ/pqf8yScr+6TqbtawBHd4EYuPwRC5bUBqVQw=) 12: Wz0IiveJRR3iZ_TFadI3Bt6mJJE.roa (hash: CImcnKPxhqg5cF+ps6Yupe+fhV0VE9C6rzuLTV7FS3Q=) 13: X2QsnfxAM9ScjVh_AzAztNDaXJg.roa (hash: L4YEdLYOkjYPPZMBRJDRYkJkVBQq0athDIG3eYPShmM=) 14: Z_IuqEKKfXuEOIP93u24e6BLk0E.roa (hash: 9YG/wmkjQ+naLweN0fWYFNb6KTTbRHlNigN8yWNOBNk=) 15: bjs_zJFuHzjoxK2NthqbKcV1s-8.roa (hash: Eg2O923oFj6n/iosVJD0SXVlsUTZEP0y964Jkw4vJR0=) 16: gho_IfsMKU1tSlKbLx29S9ERm9c.crl (hash: PRpJLZx9gIP78dPaw9SQ+CpQPIcvw+H99+8va/NslkA=) 17: hlqVsa8g3LBYYCgakZsvR_HSrMI.roa (hash: 0Q3BsaAbv0dPxaHiDBoT0UxeEcJjYgRp/S4n3pvDhrc=) 18: u26dzWx1WsuAyPhRE3IG1GMmdJc.roa (hash: gEHPHjFqESUZPon7FHlszrJPYiDLqkhRmgKIOhvsfGY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/edc855-f2bc-4e9c-8c0c-b6f2ac86ef27/1/gho_IfsMKU1tSlKbLx29S9ERm9c.crl rsync://rpki.ripe.net/repository/DEFAULT/12/edc855-f2bc-4e9c-8c0c-b6f2ac86ef27/1/gho_IfsMKU1tSlKbLx29S9ERm9c.mft rsync://rpki.ripe.net/repository/DEFAULT/gho_IfsMKU1tSlKbLx29S9ERm9c.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 16 Nov 2026 01:01:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a1:dc:b9:25:69:93:ae:2d:a0:d8:ac:b5:5c:76:de:eb:f7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=821a3f21fb0c294d6d4a529b2f1dbd4bd1119bd7 Validity Not Before: Nov 15 01:01:23 2026 GMT Not After : Nov 16 01:01:23 2026 GMT Subject: CN=7960e56291118849a8f7ef723c538fcc7b9234aa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:2a:67:89:0a:22:12:65:38:e6:75:d3:74:09: d9:99:6a:d1:79:4f:92:a2:39:1b:f0:46:b8:94:1d: 2c:af:07:91:03:a8:6d:d1:68:c9:fc:6a:0d:67:eb: f1:2b:54:37:d6:a3:b7:ac:ed:37:01:f1:2b:ff:c8: 2d:a1:ec:d3:3a:db:ea:16:dc:1e:83:b9:c1:94:d7: e0:cb:0b:66:ad:55:a5:f9:ea:86:44:0e:c7:38:b5: 9a:85:40:f5:03:8d:fb:77:85:87:eb:e1:c1:f8:a6: 82:a8:d4:03:70:ce:94:5f:b5:86:97:d8:39:09:2d: 40:ce:da:aa:dd:72:e6:d5:8c:a7:58:d4:6c:84:fc: b7:0d:1b:db:09:55:80:c9:a3:4e:16:68:aa:c0:44: 1b:97:8b:aa:8a:b3:90:10:5a:35:8a:90:3d:2f:2f: 8a:85:7e:c1:bd:26:c3:de:67:f9:66:9d:b2:7a:e5: cb:59:7d:38:01:cc:df:7e:3b:78:30:4c:26:7e:57: f2:cf:eb:4a:65:19:ba:e9:d5:bd:06:5b:cb:90:6c: a2:27:cb:fd:3a:6d:ad:53:de:7e:23:f3:be:2a:5e: cd:f2:dd:88:30:55:8f:c2:28:e6:ae:b9:df:8b:b7: 00:0d:a6:14:de:5b:26:c6:05:04:7e:5a:f0:4d:e4: 5e:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:60:E5:62:91:11:88:49:A8:F7:EF:72:3C:53:8F:CC:7B:92:34:AA X509v3 Authority Key Identifier: keyid:82:1A:3F:21:FB:0C:29:4D:6D:4A:52:9B:2F:1D:BD:4B:D1:11:9B:D7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gho_IfsMKU1tSlKbLx29S9ERm9c.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/edc855-f2bc-4e9c-8c0c-b6f2ac86ef27/1/gho_IfsMKU1tSlKbLx29S9ERm9c.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/12/edc855-f2bc-4e9c-8c0c-b6f2ac86ef27/1/gho_IfsMKU1tSlKbLx29S9ERm9c.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 71:ef:0d:d2:3b:94:4a:5b:ff:89:9a:a2:d4:7c:11:62:47:a2: a6:cd:d8:2c:3d:4c:7c:dd:d9:c4:19:ac:76:e8:88:86:a7:b7: 61:21:c1:06:c1:11:26:5f:b0:6b:16:8c:05:aa:88:93:57:8f: 3c:61:80:b5:71:de:9f:12:f7:41:9e:da:fd:44:79:5b:92:dd: f6:b9:99:58:44:d8:b9:56:24:fb:20:7f:55:fc:d6:95:af:40: b8:a3:57:e7:e2:6c:54:03:64:e9:04:52:23:8c:40:06:e9:e9: f7:d6:25:92:88:23:63:ba:0e:1d:2f:d1:ca:e6:81:3f:7f:f5: 18:72:0f:56:3a:45:9e:b6:80:7d:22:a3:19:2e:7a:23:e9:af: 04:22:46:73:53:ef:bc:6e:46:2a:e4:e7:23:60:73:9c:fb:f7: f4:00:67:05:83:d3:db:ff:dc:a7:14:1d:69:88:64:9b:4e:89: 93:27:20:a2:39:07:45:c2:44:20:27:5e:69:e8:31:2b:bd:2b: 97:62:30:5d:1f:30:a4:25:b8:86:8d:c3:24:ef:66:be:06:1b: 94:f1:08:f7:88:37:ff:69:88:5b:8e:50:47:a8:00:e5:69:91: 8a:b6:d8:61:9a:58:0b:6a:61:54:f3:0b:84:f7:57:2f:6b:33: 9a:44:13:1e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaHcuSVpk64toNistVx23uv3MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDgyMWEzZjIxZmIwYzI5NGQ2ZDRhNTI5YjJmMWRiZDRiZDEx MTliZDcwHhcNMjYxMTE1MDEwMTIzWhcNMjYxMTE2MDEwMTIzWjAzMTEwLwYDVQQD Eyg3OTYwZTU2MjkxMTE4ODQ5YThmN2VmNzIzYzUzOGZjYzdiOTIzNGFhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyipniQoiEmU45nXTdAnZmWrReU+S ojkb8Ea4lB0srweRA6ht0WjJ/GoNZ+vxK1Q31qO3rO03AfEr/8gtoezTOtvqFtwe g7nBlNfgywtmrVWl+eqGRA7HOLWahUD1A437d4WH6+HB+KaCqNQDcM6UX7WGl9g5 CS1Aztqq3XLm1YynWNRshPy3DRvbCVWAyaNOFmiqwEQbl4uqirOQEFo1ipA9Ly+K hX7BvSbD3mf5Zp2yeuXLWX04Aczffjt4MEwmflfyz+tKZRm66dW9BlvLkGyiJ8v9 Om2tU95+I/O+Kl7N8t2IMFWPwijmrrnfi7cADaYU3lsmxgUEflrwTeReqQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHlg5WKREYhJqPfvcjxTj8x7kjSqMB8GA1UdIwQY MBaAFIIaPyH7DClNbUpSmy8dvUvREZvXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZ2hvX0lmc01LVTF0U2xLYkx4MjlTOUVSbTljLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMi9lZGM4NTUtZjJiYy00ZTljLThjMGMt YjZmMmFjODZlZjI3LzEvZ2hvX0lmc01LVTF0U2xLYkx4MjlTOUVSbTljLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMi9lZGM4NTUtZjJiYy00ZTljLThjMGMtYjZmMmFjODZlZjI3 LzEvZ2hvX0lmc01LVTF0U2xLYkx4MjlTOUVSbTljLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAce8N0juU Slv/iZqi1HwRYkeips3YLD1MfN3ZxBmsduiIhqe3YSHBBsERJl+waxaMBaqIk1eP PGGAtXHenxL3QZ7a/UR5W5Ld9rmZWETYuVYk+yB/VfzWla9AuKNX5+JsVANk6QRS I4xABunp99YlkogjY7oOHS/RyuaBP3/1GHIPVjpFnraAfSKjGS56I+mvBCJGc1Pv vG5GKuTnI2BznPv39ABnBYPT2//cpxQdaYhkm06JkycgojkHRcJEICdeaegxK70r l2IwXR8wpCW4ho3DJO9mvgYblPEI94g3/2mIW45QR6gA5WmRirbYYZpYC2phVPML hPdXL2szmkQTHg== -----END CERTIFICATE-----Generated at Sun Nov 15 12:08:57 2026 by rpki-client