$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/12/edc855-f2bc-4e9c-8c0c-b6f2ac86ef27/1/gho_IfsMKU1tSlKbLx29S9ERm9c.mft File: gho_IfsMKU1tSlKbLx29S9ERm9c.mft (raw, json) Hash identifier: g5o3sLh5UtDEw8ABj1rAKUf24HTDSbZXC2HwI91QmnQ= Subject key identifier: D1:45:00:A3:5B:7B:A1:EF:FD:3C:C1:74:C6:BE:7D:AF:01:33:A3:43 Authority key identifier: 82:1A:3F:21:FB:0C:29:4D:6D:4A:52:9B:2F:1D:BD:4B:D1:11:9B:D7 Certificate issuer: /CN=821a3f21fb0c294d6d4a529b2f1dbd4bd1119bd7 Certificate serial: 01A099C87A7E23010F0BA49CE0060D00EB58 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gho_IfsMKU1tSlKbLx29S9ERm9c.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/edc855-f2bc-4e9c-8c0c-b6f2ac86ef27/1/gho_IfsMKU1tSlKbLx29S9ERm9c.mft Manifest number: 14B6 Signing time: Sun 13 Sep 2026 08:00:47 +0000 Manifest this update: Sun 13 Sep 2026 08:00:47 +0000 Manifest next update: Mon 14 Sep 2026 08:00:47 +0000 Files and hashes: 1: 94DmWvO75aSCrTILT7xO5QfIZ4Q.roa (hash: yowEVWaH5JasWlMxUT7Mgz1/3iSP8rVz/KjlsGeBATs=) 2: I0ycopSi6_q86tsS_2ZsGMaSE7E.roa (hash: X5k67tgIigX44haykK5HKygDUVpwt1sPzwvIgtRhgUo=) 3: Lw_o47E9qYaZtJPZjp5m1M1e0_o.roa (hash: TnHpGib6gDq3lP3ubauOs2iA7D/xB8DKvaZF7GPTkuk=) 4: MRCItQ1B9948OVdVK1kL96AGPQI.roa (hash: ZQgpMxwvj3QAdwytn7kSRtX4MaK4Pcv8MlZ4Lzpi3Pg=) 5: OQ-6VTdp1vw9GrjNLFmvI9JYOrs.roa (hash: ZPmtBIJ2La5bnUm+sApv+AeoWDVjiZhyYSZEHB1jKmo=) 6: OxJM60qRQUOtdqYrv27xs3_kv9k.roa (hash: w3ZIUcbiJQn/X+ANNYduQprQtRgqv43tl64iIBJ+uVs=) 7: PujNlKftYzeQaE0MnZm0EPh4AFY.roa (hash: KOYoiHizuILiOcTb5DR0niku+PQ57DIf210w8rlbdQY=) 8: PyHODj5n0DejAoWrQZBIRXaXo6Y.roa (hash: 3ofBNW8DPxuvHoS9tkTr0YH1zUrrGyXEWYQ/aOGrjNI=) 9: RTPP9X2zvoR_qL8VtqZr6WEHKzw.roa (hash: bz39/MS5H8r1qd18PCFQ3+2kRu1MJoP1Vd1Xyr//BW0=) 10: WGYchnyCAbqQd8pzwZhRwcjvgv8.roa (hash: I9YjzWZ/pqf8yScr+6TqbtawBHd4EYuPwRC5bUBqVQw=) 11: Wz0IiveJRR3iZ_TFadI3Bt6mJJE.roa (hash: CImcnKPxhqg5cF+ps6Yupe+fhV0VE9C6rzuLTV7FS3Q=) 12: X2QsnfxAM9ScjVh_AzAztNDaXJg.roa (hash: L4YEdLYOkjYPPZMBRJDRYkJkVBQq0athDIG3eYPShmM=) 13: Z_IuqEKKfXuEOIP93u24e6BLk0E.roa (hash: 9YG/wmkjQ+naLweN0fWYFNb6KTTbRHlNigN8yWNOBNk=) 14: bjs_zJFuHzjoxK2NthqbKcV1s-8.roa (hash: Eg2O923oFj6n/iosVJD0SXVlsUTZEP0y964Jkw4vJR0=) 15: gho_IfsMKU1tSlKbLx29S9ERm9c.crl (hash: xn9iHkOBBsPBoOrqb7JFsrAZf16EaNQo3j12CTvDE1M=) 16: kELckgtwVoSvJeEmqDzRwJ_w8M4.roa (hash: ryrV6l1reh0IiB1vVcw5FXf5SQ2NaFZbF4Pl/NJCuQ4=) 17: u26dzWx1WsuAyPhRE3IG1GMmdJc.roa (hash: gEHPHjFqESUZPon7FHlszrJPYiDLqkhRmgKIOhvsfGY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/edc855-f2bc-4e9c-8c0c-b6f2ac86ef27/1/gho_IfsMKU1tSlKbLx29S9ERm9c.crl rsync://rpki.ripe.net/repository/DEFAULT/12/edc855-f2bc-4e9c-8c0c-b6f2ac86ef27/1/gho_IfsMKU1tSlKbLx29S9ERm9c.mft rsync://rpki.ripe.net/repository/DEFAULT/gho_IfsMKU1tSlKbLx29S9ERm9c.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 14 Sep 2026 03:19:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a0:99:c8:7a:7e:23:01:0f:0b:a4:9c:e0:06:0d:00:eb:58 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=821a3f21fb0c294d6d4a529b2f1dbd4bd1119bd7 Validity Not Before: Sep 13 08:00:47 2026 GMT Not After : Sep 14 08:00:47 2026 GMT Subject: CN=d14500a35b7ba1effd3cc174c6be7daf0133a343 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:bf:aa:ff:76:c8:6b:3c:87:a9:43:90:91:fb: c9:88:a8:fe:2d:f7:0d:e1:c6:e4:0e:17:57:ac:c4: c4:9b:b2:67:55:b0:3d:43:e2:3a:65:e8:e4:22:ce: 21:68:7a:df:be:3d:b7:e6:b1:7a:bd:83:35:61:b0: ee:ee:e6:49:9a:23:b3:49:6b:64:7b:22:91:02:16: e3:7a:3f:09:7d:46:a5:b7:02:1a:38:fc:a3:52:79: 4d:df:ad:26:ed:77:5e:10:19:f6:bf:e8:83:a6:6f: 13:53:61:5c:28:f0:73:79:e2:43:e4:a2:f2:00:e7: 70:cb:7a:bf:b1:27:3d:eb:b2:62:38:a1:b6:1c:3d: ef:67:2f:4a:a4:72:f0:bd:57:36:3e:fc:83:89:a6: f9:a3:01:68:33:60:29:40:87:2e:83:16:fe:f3:9f: 86:a9:66:82:a8:07:ff:2c:a3:b2:8e:59:86:8e:30: 70:e2:63:8a:43:fe:bc:00:de:0f:00:1d:b0:eb:db: c2:54:6c:08:34:96:0e:dd:fb:32:65:c3:b2:b9:84: a6:3c:cc:8a:4e:5a:5c:b0:2b:38:d4:e0:00:fd:f4: 92:05:22:6d:04:61:1a:94:f6:9c:58:06:99:ee:5a: 78:72:46:95:f8:c7:cd:c8:08:8c:7e:c4:c4:4a:3a: 6c:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:45:00:A3:5B:7B:A1:EF:FD:3C:C1:74:C6:BE:7D:AF:01:33:A3:43 X509v3 Authority Key Identifier: keyid:82:1A:3F:21:FB:0C:29:4D:6D:4A:52:9B:2F:1D:BD:4B:D1:11:9B:D7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gho_IfsMKU1tSlKbLx29S9ERm9c.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/edc855-f2bc-4e9c-8c0c-b6f2ac86ef27/1/gho_IfsMKU1tSlKbLx29S9ERm9c.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/12/edc855-f2bc-4e9c-8c0c-b6f2ac86ef27/1/gho_IfsMKU1tSlKbLx29S9ERm9c.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 28:fe:5b:8c:96:bd:c6:a7:78:8a:75:a1:df:fd:73:05:40:da: 1e:16:fd:4d:2f:89:a1:2c:ec:c1:69:11:82:c3:54:02:66:d5: 22:7b:e4:22:a9:b9:2d:de:77:e0:04:5f:92:34:75:74:de:09: f5:17:3d:19:9d:4e:0c:a0:a5:74:69:e3:79:66:5a:0e:3d:42: e9:5d:14:73:ed:66:83:96:97:86:56:5c:d2:b0:ab:58:f6:53: 3c:14:1e:e3:a0:5c:e0:d7:47:7b:2a:70:e1:84:27:5b:85:89: 85:54:11:f4:47:29:8c:81:49:26:a3:1d:c8:2e:80:a8:ba:67: 0c:76:57:05:cd:0a:12:fe:49:e1:2c:d9:19:46:b1:b6:f1:f3: 8d:b3:c5:8c:c7:89:5f:3f:26:22:8e:ae:8b:aa:8a:5e:3a:54: c5:72:2a:60:d6:24:11:29:94:78:68:30:13:c8:de:58:9d:2a: e4:94:45:61:49:04:55:83:36:28:0c:dc:fb:c2:7e:f8:da:63: 60:06:d9:72:b9:cc:91:53:05:b2:20:6e:78:81:06:20:99:6c: 92:0c:b5:c2:7a:eb:b0:ad:51:d5:eb:77:5d:43:d2:0d:6c:9d: bc:d8:e1:2c:c2:67:75:2d:d7:b6:29:19:5c:13:85:53:61:25: d9:5a:d3:ed -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaCZyHp+IwEPC6Sc4AYNAOtYMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDgyMWEzZjIxZmIwYzI5NGQ2ZDRhNTI5YjJmMWRiZDRiZDEx MTliZDcwHhcNMjYwOTEzMDgwMDQ3WhcNMjYwOTE0MDgwMDQ3WjAzMTEwLwYDVQQD EyhkMTQ1MDBhMzViN2JhMWVmZmQzY2MxNzRjNmJlN2RhZjAxMzNhMzQzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwL+q/3bIazyHqUOQkfvJiKj+LfcN 4cbkDhdXrMTEm7JnVbA9Q+I6ZejkIs4haHrfvj235rF6vYM1YbDu7uZJmiOzSWtk eyKRAhbjej8JfUaltwIaOPyjUnlN360m7XdeEBn2v+iDpm8TU2FcKPBzeeJD5KLy AOdwy3q/sSc967JiOKG2HD3vZy9KpHLwvVc2PvyDiab5owFoM2ApQIcugxb+85+G qWaCqAf/LKOyjlmGjjBw4mOKQ/68AN4PAB2w69vCVGwINJYO3fsyZcOyuYSmPMyK TlpcsCs41OAA/fSSBSJtBGEalPacWAaZ7lp4ckaV+MfNyAiMfsTESjpssQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNFFAKNbe6Hv/TzBdMa+fa8BM6NDMB8GA1UdIwQY MBaAFIIaPyH7DClNbUpSmy8dvUvREZvXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZ2hvX0lmc01LVTF0U2xLYkx4MjlTOUVSbTljLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMi9lZGM4NTUtZjJiYy00ZTljLThjMGMt YjZmMmFjODZlZjI3LzEvZ2hvX0lmc01LVTF0U2xLYkx4MjlTOUVSbTljLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMi9lZGM4NTUtZjJiYy00ZTljLThjMGMtYjZmMmFjODZlZjI3 LzEvZ2hvX0lmc01LVTF0U2xLYkx4MjlTOUVSbTljLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKP5bjJa9 xqd4inWh3/1zBUDaHhb9TS+JoSzswWkRgsNUAmbVInvkIqm5Ld534ARfkjR1dN4J 9Rc9GZ1ODKCldGnjeWZaDj1C6V0Uc+1mg5aXhlZc0rCrWPZTPBQe46Bc4NdHeypw 4YQnW4WJhVQR9EcpjIFJJqMdyC6AqLpnDHZXBc0KEv5J4SzZGUaxtvHzjbPFjMeJ Xz8mIo6ui6qKXjpUxXIqYNYkESmUeGgwE8jeWJ0q5JRFYUkEVYM2KAzc+8J++Npj YAbZcrnMkVMFsiBueIEGIJlskgy1wnrrsK1R1et3XUPSDWydvNjhLMJndS3XtikZ XBOFU2El2VrT7Q== -----END CERTIFICATE-----Generated at Sun Sep 13 12:55:05 2026 by rpki-client