$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/12/edc855-f2bc-4e9c-8c0c-b6f2ac86ef27/1/gho_IfsMKU1tSlKbLx29S9ERm9c.mft File: gho_IfsMKU1tSlKbLx29S9ERm9c.mft (raw, json) Hash identifier: LKtb13jNaSe35UF4RjFgX9gECWNEcZNXAiaS/HyOBZk= Subject key identifier: EA:7F:4F:3C:82:76:76:44:8E:A8:2C:F9:3D:F3:C2:12:16:34:BD:FC Authority key identifier: 82:1A:3F:21:FB:0C:29:4D:6D:4A:52:9B:2F:1D:BD:4B:D1:11:9B:D7 Certificate issuer: /CN=821a3f21fb0c294d6d4a529b2f1dbd4bd1119bd7 Certificate serial: 01A1A0A4084A2016EDCB550A97D8C9ECC6F3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gho_IfsMKU1tSlKbLx29S9ERm9c.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/edc855-f2bc-4e9c-8c0c-b6f2ac86ef27/1/gho_IfsMKU1tSlKbLx29S9ERm9c.mft Manifest number: 1540 Signing time: Tue 03 Nov 2026 09:01:06 +0000 Manifest this update: Tue 03 Nov 2026 09:01:06 +0000 Manifest next update: Wed 04 Nov 2026 09:01:06 +0000 Files and hashes: 1: 3uI5lQRkJpip0g2Yf5nrOxnpcps.roa (hash: Jrv7cJG1MMoAzxus2BXaB2YNBDsOS6rV68Paas64eu4=) 2: 94DmWvO75aSCrTILT7xO5QfIZ4Q.roa (hash: yowEVWaH5JasWlMxUT7Mgz1/3iSP8rVz/KjlsGeBATs=) 3: I0ycopSi6_q86tsS_2ZsGMaSE7E.roa (hash: X5k67tgIigX44haykK5HKygDUVpwt1sPzwvIgtRhgUo=) 4: Lw_o47E9qYaZtJPZjp5m1M1e0_o.roa (hash: TnHpGib6gDq3lP3ubauOs2iA7D/xB8DKvaZF7GPTkuk=) 5: MRCItQ1B9948OVdVK1kL96AGPQI.roa (hash: ZQgpMxwvj3QAdwytn7kSRtX4MaK4Pcv8MlZ4Lzpi3Pg=) 6: OM-ZUuhtFfEbzEKe1saj5HWlSS8.roa (hash: dCqQ/qpl5rIhH4UzeW/Kln8+INSyixdogETHSosIE5g=) 7: OQ-6VTdp1vw9GrjNLFmvI9JYOrs.roa (hash: ZPmtBIJ2La5bnUm+sApv+AeoWDVjiZhyYSZEHB1jKmo=) 8: OxJM60qRQUOtdqYrv27xs3_kv9k.roa (hash: w3ZIUcbiJQn/X+ANNYduQprQtRgqv43tl64iIBJ+uVs=) 9: PyHODj5n0DejAoWrQZBIRXaXo6Y.roa (hash: 3ofBNW8DPxuvHoS9tkTr0YH1zUrrGyXEWYQ/aOGrjNI=) 10: RTPP9X2zvoR_qL8VtqZr6WEHKzw.roa (hash: bz39/MS5H8r1qd18PCFQ3+2kRu1MJoP1Vd1Xyr//BW0=) 11: WGYchnyCAbqQd8pzwZhRwcjvgv8.roa (hash: I9YjzWZ/pqf8yScr+6TqbtawBHd4EYuPwRC5bUBqVQw=) 12: Wz0IiveJRR3iZ_TFadI3Bt6mJJE.roa (hash: CImcnKPxhqg5cF+ps6Yupe+fhV0VE9C6rzuLTV7FS3Q=) 13: X2QsnfxAM9ScjVh_AzAztNDaXJg.roa (hash: L4YEdLYOkjYPPZMBRJDRYkJkVBQq0athDIG3eYPShmM=) 14: Z_IuqEKKfXuEOIP93u24e6BLk0E.roa (hash: 9YG/wmkjQ+naLweN0fWYFNb6KTTbRHlNigN8yWNOBNk=) 15: bjs_zJFuHzjoxK2NthqbKcV1s-8.roa (hash: Eg2O923oFj6n/iosVJD0SXVlsUTZEP0y964Jkw4vJR0=) 16: fVY5gzIIZvJtdrtOozxcL9l2bBc.roa (hash: AGYXpBdFt+30c+3GlaAq4g0YZ4o86Ddcnqm3a8/1HNY=) 17: gho_IfsMKU1tSlKbLx29S9ERm9c.crl (hash: M7sbtQS7IjbkqKxckCvfY5H4qyP19cr0n/Z2o+vLYdo=) 18: u26dzWx1WsuAyPhRE3IG1GMmdJc.roa (hash: gEHPHjFqESUZPon7FHlszrJPYiDLqkhRmgKIOhvsfGY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/edc855-f2bc-4e9c-8c0c-b6f2ac86ef27/1/gho_IfsMKU1tSlKbLx29S9ERm9c.crl rsync://rpki.ripe.net/repository/DEFAULT/12/edc855-f2bc-4e9c-8c0c-b6f2ac86ef27/1/gho_IfsMKU1tSlKbLx29S9ERm9c.mft rsync://rpki.ripe.net/repository/DEFAULT/gho_IfsMKU1tSlKbLx29S9ERm9c.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 04 Nov 2026 08:00:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a1:a0:a4:08:4a:20:16:ed:cb:55:0a:97:d8:c9:ec:c6:f3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=821a3f21fb0c294d6d4a529b2f1dbd4bd1119bd7 Validity Not Before: Nov 3 09:01:06 2026 GMT Not After : Nov 4 09:01:06 2026 GMT Subject: CN=ea7f4f3c827676448ea82cf93df3c2121634bdfc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:f6:d6:87:e4:5b:17:c5:28:f9:d4:dd:69:71: 81:ac:87:1d:ea:53:97:f3:ac:1d:d8:03:0f:f6:21: c5:72:06:4d:54:4b:14:3e:6a:70:93:02:3b:80:fd: cf:7c:5a:60:c0:1e:07:d5:51:71:29:fe:38:52:b2: 18:d5:3d:9f:f8:96:fc:6d:02:08:de:c8:5e:c2:6e: 49:39:09:da:cc:3a:62:d8:5e:d7:47:f0:07:8e:0d: 9a:c2:5b:40:55:50:ae:52:cb:b7:fe:e8:4b:20:00: 24:7e:25:94:bd:51:a1:bb:5f:44:35:c7:a4:45:a9: a5:17:bd:87:ee:8a:89:69:c6:9a:ff:34:d4:dd:bd: 65:29:7d:63:8f:24:06:e8:bc:44:75:51:a3:83:46: b4:20:78:8f:d5:70:28:1b:c5:76:80:15:cc:e6:c9: e4:89:d8:dc:dc:4f:9e:0d:48:49:af:96:1e:ae:b9: 1e:b4:18:0d:aa:86:f9:a5:42:06:2c:50:36:95:89: e2:5e:3e:55:a7:3a:28:bc:cc:b3:cc:c3:73:93:93: ce:09:52:06:dc:3d:42:ba:63:2f:32:88:9e:49:3e: bd:ec:c5:02:7b:1a:41:77:cb:e9:5e:61:a6:ea:3d: 21:5c:7b:9a:34:06:69:8c:f9:e9:42:02:af:71:16: eb:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:7F:4F:3C:82:76:76:44:8E:A8:2C:F9:3D:F3:C2:12:16:34:BD:FC X509v3 Authority Key Identifier: keyid:82:1A:3F:21:FB:0C:29:4D:6D:4A:52:9B:2F:1D:BD:4B:D1:11:9B:D7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gho_IfsMKU1tSlKbLx29S9ERm9c.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/edc855-f2bc-4e9c-8c0c-b6f2ac86ef27/1/gho_IfsMKU1tSlKbLx29S9ERm9c.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/12/edc855-f2bc-4e9c-8c0c-b6f2ac86ef27/1/gho_IfsMKU1tSlKbLx29S9ERm9c.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a0:f1:87:54:40:55:9a:8a:7d:ed:bd:d3:f4:79:f7:f4:35:a2: a0:6d:f7:91:01:1a:ad:3e:ca:31:bd:db:9b:7f:60:71:4c:9d: fc:f1:01:5e:4f:b4:c0:79:67:1b:e3:fa:92:eb:30:89:f6:07: c6:61:5c:6d:b9:ea:e4:1a:41:09:3a:5a:63:6d:6e:36:f7:c5: 26:b0:f1:3d:2c:cb:10:67:73:92:42:09:9c:93:83:7c:4e:31: 20:19:48:f7:5b:b0:59:f5:ed:3f:e8:67:25:72:0e:31:f6:ce: ab:19:5c:ab:c1:c7:07:6d:6a:39:20:16:31:4b:a3:96:f9:55: 1f:5f:42:b5:ac:3d:31:b2:a1:2b:2c:df:e3:c3:b4:35:0e:dd: 53:a6:f6:27:e4:70:41:2d:cc:3e:fc:c1:0a:20:95:0c:0e:24: c1:12:83:9d:5e:f1:4e:64:21:cd:01:0a:a4:60:82:5f:c2:52: 70:9b:cb:fe:68:12:b9:ca:00:c8:5e:8c:84:ad:b4:36:72:59: 4d:75:a4:14:b2:dc:b0:55:21:31:6b:8b:2d:16:7d:1d:af:14: a5:44:21:d5:67:93:fe:93:4f:56:6c:67:24:ca:c4:ef:6a:b7: c8:4d:f3:3f:d2:fb:46:ea:ae:2e:51:91:a5:11:88:c8:17:52: 04:e8:33:54 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaGgpAhKIBbty1UKl9jJ7MbzMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDgyMWEzZjIxZmIwYzI5NGQ2ZDRhNTI5YjJmMWRiZDRiZDEx MTliZDcwHhcNMjYxMTAzMDkwMTA2WhcNMjYxMTA0MDkwMTA2WjAzMTEwLwYDVQQD EyhlYTdmNGYzYzgyNzY3NjQ0OGVhODJjZjkzZGYzYzIxMjE2MzRiZGZjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxvbWh+RbF8Uo+dTdaXGBrIcd6lOX 86wd2AMP9iHFcgZNVEsUPmpwkwI7gP3PfFpgwB4H1VFxKf44UrIY1T2f+Jb8bQII 3shewm5JOQnazDpi2F7XR/AHjg2awltAVVCuUsu3/uhLIAAkfiWUvVGhu19ENcek RamlF72H7oqJacaa/zTU3b1lKX1jjyQG6LxEdVGjg0a0IHiP1XAoG8V2gBXM5snk idjc3E+eDUhJr5YerrketBgNqob5pUIGLFA2lYniXj5VpzoovMyzzMNzk5POCVIG 3D1CumMvMoieST697MUCexpBd8vpXmGm6j0hXHuaNAZpjPnpQgKvcRbrMQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOp/TzyCdnZEjqgs+T3zwhIWNL38MB8GA1UdIwQY MBaAFIIaPyH7DClNbUpSmy8dvUvREZvXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZ2hvX0lmc01LVTF0U2xLYkx4MjlTOUVSbTljLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMi9lZGM4NTUtZjJiYy00ZTljLThjMGMt YjZmMmFjODZlZjI3LzEvZ2hvX0lmc01LVTF0U2xLYkx4MjlTOUVSbTljLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMi9lZGM4NTUtZjJiYy00ZTljLThjMGMtYjZmMmFjODZlZjI3 LzEvZ2hvX0lmc01LVTF0U2xLYkx4MjlTOUVSbTljLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAoPGHVEBV mop97b3T9Hn39DWioG33kQEarT7KMb3bm39gcUyd/PEBXk+0wHlnG+P6kuswifYH xmFcbbnq5BpBCTpaY21uNvfFJrDxPSzLEGdzkkIJnJODfE4xIBlI91uwWfXtP+hn JXIOMfbOqxlcq8HHB21qOSAWMUujlvlVH19Ctaw9MbKhKyzf48O0NQ7dU6b2J+Rw QS3MPvzBCiCVDA4kwRKDnV7xTmQhzQEKpGCCX8JScJvL/mgSucoAyF6MhK20NnJZ TXWkFLLcsFUhMWuLLRZ9Ha8UpUQh1WeT/pNPVmxnJMrE72q3yE3zP9L7RuquLlGR pRGIyBdSBOgzVA== -----END CERTIFICATE-----Generated at Tue Nov 3 16:20:48 2026 by rpki-client