$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/12/edc855-f2bc-4e9c-8c0c-b6f2ac86ef27/1/gho_IfsMKU1tSlKbLx29S9ERm9c.mft File: gho_IfsMKU1tSlKbLx29S9ERm9c.mft (raw, json) Hash identifier: Y2c5QCtGepzGz2YWhRHSdmmRJ9q91r8Iehd2LhWpqc0= Subject key identifier: 22:46:99:A2:09:52:FD:1E:37:01:EC:C1:13:CA:6D:69:2B:39:E3:34 Authority key identifier: 82:1A:3F:21:FB:0C:29:4D:6D:4A:52:9B:2F:1D:BD:4B:D1:11:9B:D7 Certificate issuer: /CN=821a3f21fb0c294d6d4a529b2f1dbd4bd1119bd7 Certificate serial: 01A16E36F984C4A713C9D93F1A72F321C7A8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gho_IfsMKU1tSlKbLx29S9ERm9c.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/edc855-f2bc-4e9c-8c0c-b6f2ac86ef27/1/gho_IfsMKU1tSlKbLx29S9ERm9c.mft Manifest number: 1524 Signing time: Sat 24 Oct 2026 14:00:58 +0000 Manifest this update: Sat 24 Oct 2026 14:00:58 +0000 Manifest next update: Sun 25 Oct 2026 14:00:58 +0000 Files and hashes: 1: 94DmWvO75aSCrTILT7xO5QfIZ4Q.roa (hash: yowEVWaH5JasWlMxUT7Mgz1/3iSP8rVz/KjlsGeBATs=) 2: I0ycopSi6_q86tsS_2ZsGMaSE7E.roa (hash: X5k67tgIigX44haykK5HKygDUVpwt1sPzwvIgtRhgUo=) 3: Lw_o47E9qYaZtJPZjp5m1M1e0_o.roa (hash: TnHpGib6gDq3lP3ubauOs2iA7D/xB8DKvaZF7GPTkuk=) 4: MRCItQ1B9948OVdVK1kL96AGPQI.roa (hash: ZQgpMxwvj3QAdwytn7kSRtX4MaK4Pcv8MlZ4Lzpi3Pg=) 5: OQ-6VTdp1vw9GrjNLFmvI9JYOrs.roa (hash: ZPmtBIJ2La5bnUm+sApv+AeoWDVjiZhyYSZEHB1jKmo=) 6: OxJM60qRQUOtdqYrv27xs3_kv9k.roa (hash: w3ZIUcbiJQn/X+ANNYduQprQtRgqv43tl64iIBJ+uVs=) 7: PujNlKftYzeQaE0MnZm0EPh4AFY.roa (hash: KOYoiHizuILiOcTb5DR0niku+PQ57DIf210w8rlbdQY=) 8: PyHODj5n0DejAoWrQZBIRXaXo6Y.roa (hash: 3ofBNW8DPxuvHoS9tkTr0YH1zUrrGyXEWYQ/aOGrjNI=) 9: RTPP9X2zvoR_qL8VtqZr6WEHKzw.roa (hash: bz39/MS5H8r1qd18PCFQ3+2kRu1MJoP1Vd1Xyr//BW0=) 10: WGYchnyCAbqQd8pzwZhRwcjvgv8.roa (hash: I9YjzWZ/pqf8yScr+6TqbtawBHd4EYuPwRC5bUBqVQw=) 11: Wz0IiveJRR3iZ_TFadI3Bt6mJJE.roa (hash: CImcnKPxhqg5cF+ps6Yupe+fhV0VE9C6rzuLTV7FS3Q=) 12: X2QsnfxAM9ScjVh_AzAztNDaXJg.roa (hash: L4YEdLYOkjYPPZMBRJDRYkJkVBQq0athDIG3eYPShmM=) 13: Z_IuqEKKfXuEOIP93u24e6BLk0E.roa (hash: 9YG/wmkjQ+naLweN0fWYFNb6KTTbRHlNigN8yWNOBNk=) 14: bjs_zJFuHzjoxK2NthqbKcV1s-8.roa (hash: Eg2O923oFj6n/iosVJD0SXVlsUTZEP0y964Jkw4vJR0=) 15: gho_IfsMKU1tSlKbLx29S9ERm9c.crl (hash: omm6/lm6nULvzMKd/h7k50JPivOIqo53X3z2GoF5tT8=) 16: kELckgtwVoSvJeEmqDzRwJ_w8M4.roa (hash: ryrV6l1reh0IiB1vVcw5FXf5SQ2NaFZbF4Pl/NJCuQ4=) 17: u26dzWx1WsuAyPhRE3IG1GMmdJc.roa (hash: gEHPHjFqESUZPon7FHlszrJPYiDLqkhRmgKIOhvsfGY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/edc855-f2bc-4e9c-8c0c-b6f2ac86ef27/1/gho_IfsMKU1tSlKbLx29S9ERm9c.crl rsync://rpki.ripe.net/repository/DEFAULT/12/edc855-f2bc-4e9c-8c0c-b6f2ac86ef27/1/gho_IfsMKU1tSlKbLx29S9ERm9c.mft rsync://rpki.ripe.net/repository/DEFAULT/gho_IfsMKU1tSlKbLx29S9ERm9c.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Oct 2026 14:00:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a1:6e:36:f9:84:c4:a7:13:c9:d9:3f:1a:72:f3:21:c7:a8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=821a3f21fb0c294d6d4a529b2f1dbd4bd1119bd7 Validity Not Before: Oct 24 14:00:58 2026 GMT Not After : Oct 25 14:00:58 2026 GMT Subject: CN=224699a20952fd1e3701ecc113ca6d692b39e334 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:9a:c1:37:fa:ce:d5:d2:06:6b:18:9f:74:99: ed:a7:51:e8:7c:67:1a:ad:95:76:50:87:e9:82:1a: 50:69:83:08:0e:69:02:e5:80:e6:70:8d:ff:bb:96: 3b:e9:e9:f8:01:1f:2f:8a:f4:3b:be:d7:2a:10:47: dd:58:54:4e:c5:6b:33:e6:8c:00:74:3d:43:1b:ea: 1a:21:76:65:7f:1e:5d:cf:38:ee:19:c6:93:3d:d3: 3e:2e:43:ae:cd:c4:21:71:77:42:e4:14:40:04:d7: 2a:6b:d2:bb:61:74:81:b7:43:78:fb:95:0c:1e:59: 50:44:07:71:bf:93:ff:14:8f:c8:a3:e3:f7:7f:55: 1d:e1:dd:e8:af:e0:cb:64:71:9b:18:7d:67:d5:2e: f2:bb:dd:85:d1:0e:bb:7e:29:48:d5:6f:0f:36:ef: 8e:67:d8:64:52:da:81:27:10:08:68:fd:6d:c4:d5: e8:3a:52:8d:5e:aa:fa:4f:24:6c:f7:83:59:25:b6: 00:44:72:a0:5e:4f:1d:6a:88:0f:dd:8d:28:15:f1: 1b:5c:fa:da:c2:ec:ec:23:ac:d3:82:ba:05:ac:23: c9:95:f8:28:2a:de:27:28:07:fd:23:df:50:55:2e: 06:65:51:34:e9:3d:31:eb:ea:60:52:ca:97:1d:67: e7:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:46:99:A2:09:52:FD:1E:37:01:EC:C1:13:CA:6D:69:2B:39:E3:34 X509v3 Authority Key Identifier: keyid:82:1A:3F:21:FB:0C:29:4D:6D:4A:52:9B:2F:1D:BD:4B:D1:11:9B:D7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gho_IfsMKU1tSlKbLx29S9ERm9c.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/edc855-f2bc-4e9c-8c0c-b6f2ac86ef27/1/gho_IfsMKU1tSlKbLx29S9ERm9c.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/12/edc855-f2bc-4e9c-8c0c-b6f2ac86ef27/1/gho_IfsMKU1tSlKbLx29S9ERm9c.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b0:48:e3:07:b1:70:0d:05:da:0f:46:61:25:17:67:cd:f2:03: 24:fa:ae:7f:c6:56:9a:87:6d:78:1e:12:09:e1:31:61:92:e2: 1c:f3:15:6d:db:f0:b2:52:f0:79:27:f4:9c:9d:37:5f:40:b0: 41:de:3d:5f:5e:2a:c7:9b:41:b7:8b:3e:70:c1:d2:3d:ac:0e: 07:78:7a:14:0d:ac:55:a1:46:7b:99:23:5e:e0:2f:c3:54:65: 80:ad:b7:7b:8e:64:b3:e0:13:18:7e:a6:c8:d9:06:cd:63:88: d4:86:98:5b:03:80:c0:e2:dd:e5:e4:91:4e:1d:aa:36:1c:52: ed:c9:b0:99:7c:27:92:f9:12:06:66:1f:d4:0f:13:95:2b:b9: 95:63:e9:b2:a6:89:fb:99:c6:9b:45:9c:d0:3f:01:78:d7:d2: a3:05:17:64:ba:4d:7d:92:c6:a0:f8:46:25:55:e4:91:66:3d: e7:8a:a2:6a:ad:9e:82:6c:e6:8f:fe:20:86:2e:18:94:d2:54: 28:98:44:cb:ad:38:b9:ea:16:22:d1:b4:c2:d1:c7:e8:5a:fc: 50:22:2d:fc:89:1c:60:f0:5c:d2:9c:39:a7:b3:5a:e0:1c:73: 00:cb:5c:32:db:1e:fd:ca:e6:2c:a6:3d:62:30:22:2e:e9:a7: 87:a7:75:d8 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaFuNvmExKcTydk/GnLzIceoMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDgyMWEzZjIxZmIwYzI5NGQ2ZDRhNTI5YjJmMWRiZDRiZDEx MTliZDcwHhcNMjYxMDI0MTQwMDU4WhcNMjYxMDI1MTQwMDU4WjAzMTEwLwYDVQQD EygyMjQ2OTlhMjA5NTJmZDFlMzcwMWVjYzExM2NhNmQ2OTJiMzllMzM0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr5rBN/rO1dIGaxifdJntp1HofGca rZV2UIfpghpQaYMIDmkC5YDmcI3/u5Y76en4AR8vivQ7vtcqEEfdWFROxWsz5owA dD1DG+oaIXZlfx5dzzjuGcaTPdM+LkOuzcQhcXdC5BRABNcqa9K7YXSBt0N4+5UM HllQRAdxv5P/FI/Io+P3f1Ud4d3or+DLZHGbGH1n1S7yu92F0Q67filI1W8PNu+O Z9hkUtqBJxAIaP1txNXoOlKNXqr6TyRs94NZJbYARHKgXk8daogP3Y0oFfEbXPra wuzsI6zTgroFrCPJlfgoKt4nKAf9I99QVS4GZVE06T0x6+pgUsqXHWfnNQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCJGmaIJUv0eNwHswRPKbWkrOeM0MB8GA1UdIwQY MBaAFIIaPyH7DClNbUpSmy8dvUvREZvXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZ2hvX0lmc01LVTF0U2xLYkx4MjlTOUVSbTljLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMi9lZGM4NTUtZjJiYy00ZTljLThjMGMt YjZmMmFjODZlZjI3LzEvZ2hvX0lmc01LVTF0U2xLYkx4MjlTOUVSbTljLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMi9lZGM4NTUtZjJiYy00ZTljLThjMGMtYjZmMmFjODZlZjI3 LzEvZ2hvX0lmc01LVTF0U2xLYkx4MjlTOUVSbTljLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAsEjjB7Fw DQXaD0ZhJRdnzfIDJPquf8ZWmodteB4SCeExYZLiHPMVbdvwslLweSf0nJ03X0Cw Qd49X14qx5tBt4s+cMHSPawOB3h6FA2sVaFGe5kjXuAvw1RlgK23e45ks+ATGH6m yNkGzWOI1IaYWwOAwOLd5eSRTh2qNhxS7cmwmXwnkvkSBmYf1A8TlSu5lWPpsqaJ +5nGm0Wc0D8BeNfSowUXZLpNfZLGoPhGJVXkkWY954qiaq2egmzmj/4ghi4YlNJU KJhEy604ueoWItG0wtHH6Fr8UCIt/IkcYPBc0pw5p7Na4BxzAMtcMtse/crmLKY9 YjAiLumnh6d12A== -----END CERTIFICATE-----Generated at Sat Oct 24 20:45:15 2026 by rpki-client