$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/12/edc855-f2bc-4e9c-8c0c-b6f2ac86ef27/1/gho_IfsMKU1tSlKbLx29S9ERm9c.mft File: gho_IfsMKU1tSlKbLx29S9ERm9c.mft (raw, json) Hash identifier: nRIx8zPro9grwzZCMuYbt/OzOleS7mWOEecFUCFEKM0= Subject key identifier: C3:3D:26:8B:B5:D1:45:17:76:E9:5D:5D:38:5A:39:6D:D7:02:3C:FE Authority key identifier: 82:1A:3F:21:FB:0C:29:4D:6D:4A:52:9B:2F:1D:BD:4B:D1:11:9B:D7 Certificate issuer: /CN=821a3f21fb0c294d6d4a529b2f1dbd4bd1119bd7 Certificate serial: 01A1513F853B67CF8D11A5739F07CC55C5C9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gho_IfsMKU1tSlKbLx29S9ERm9c.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/edc855-f2bc-4e9c-8c0c-b6f2ac86ef27/1/gho_IfsMKU1tSlKbLx29S9ERm9c.mft Manifest number: 1515 Signing time: Sun 18 Oct 2026 23:01:19 +0000 Manifest this update: Sun 18 Oct 2026 23:01:19 +0000 Manifest next update: Mon 19 Oct 2026 23:01:19 +0000 Files and hashes: 1: 94DmWvO75aSCrTILT7xO5QfIZ4Q.roa (hash: yowEVWaH5JasWlMxUT7Mgz1/3iSP8rVz/KjlsGeBATs=) 2: I0ycopSi6_q86tsS_2ZsGMaSE7E.roa (hash: X5k67tgIigX44haykK5HKygDUVpwt1sPzwvIgtRhgUo=) 3: Lw_o47E9qYaZtJPZjp5m1M1e0_o.roa (hash: TnHpGib6gDq3lP3ubauOs2iA7D/xB8DKvaZF7GPTkuk=) 4: MRCItQ1B9948OVdVK1kL96AGPQI.roa (hash: ZQgpMxwvj3QAdwytn7kSRtX4MaK4Pcv8MlZ4Lzpi3Pg=) 5: OQ-6VTdp1vw9GrjNLFmvI9JYOrs.roa (hash: ZPmtBIJ2La5bnUm+sApv+AeoWDVjiZhyYSZEHB1jKmo=) 6: OxJM60qRQUOtdqYrv27xs3_kv9k.roa (hash: w3ZIUcbiJQn/X+ANNYduQprQtRgqv43tl64iIBJ+uVs=) 7: PujNlKftYzeQaE0MnZm0EPh4AFY.roa (hash: KOYoiHizuILiOcTb5DR0niku+PQ57DIf210w8rlbdQY=) 8: PyHODj5n0DejAoWrQZBIRXaXo6Y.roa (hash: 3ofBNW8DPxuvHoS9tkTr0YH1zUrrGyXEWYQ/aOGrjNI=) 9: RTPP9X2zvoR_qL8VtqZr6WEHKzw.roa (hash: bz39/MS5H8r1qd18PCFQ3+2kRu1MJoP1Vd1Xyr//BW0=) 10: WGYchnyCAbqQd8pzwZhRwcjvgv8.roa (hash: I9YjzWZ/pqf8yScr+6TqbtawBHd4EYuPwRC5bUBqVQw=) 11: Wz0IiveJRR3iZ_TFadI3Bt6mJJE.roa (hash: CImcnKPxhqg5cF+ps6Yupe+fhV0VE9C6rzuLTV7FS3Q=) 12: X2QsnfxAM9ScjVh_AzAztNDaXJg.roa (hash: L4YEdLYOkjYPPZMBRJDRYkJkVBQq0athDIG3eYPShmM=) 13: Z_IuqEKKfXuEOIP93u24e6BLk0E.roa (hash: 9YG/wmkjQ+naLweN0fWYFNb6KTTbRHlNigN8yWNOBNk=) 14: bjs_zJFuHzjoxK2NthqbKcV1s-8.roa (hash: Eg2O923oFj6n/iosVJD0SXVlsUTZEP0y964Jkw4vJR0=) 15: gho_IfsMKU1tSlKbLx29S9ERm9c.crl (hash: DbQEcnuhi9qUG+hmFVQWtijaMeJsSMxpdaxUv7i0V/s=) 16: kELckgtwVoSvJeEmqDzRwJ_w8M4.roa (hash: ryrV6l1reh0IiB1vVcw5FXf5SQ2NaFZbF4Pl/NJCuQ4=) 17: u26dzWx1WsuAyPhRE3IG1GMmdJc.roa (hash: gEHPHjFqESUZPon7FHlszrJPYiDLqkhRmgKIOhvsfGY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/edc855-f2bc-4e9c-8c0c-b6f2ac86ef27/1/gho_IfsMKU1tSlKbLx29S9ERm9c.crl rsync://rpki.ripe.net/repository/DEFAULT/12/edc855-f2bc-4e9c-8c0c-b6f2ac86ef27/1/gho_IfsMKU1tSlKbLx29S9ERm9c.mft rsync://rpki.ripe.net/repository/DEFAULT/gho_IfsMKU1tSlKbLx29S9ERm9c.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 19 Oct 2026 17:00:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a1:51:3f:85:3b:67:cf:8d:11:a5:73:9f:07:cc:55:c5:c9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=821a3f21fb0c294d6d4a529b2f1dbd4bd1119bd7 Validity Not Before: Oct 18 23:01:19 2026 GMT Not After : Oct 19 23:01:19 2026 GMT Subject: CN=c33d268bb5d1451776e95d5d385a396dd7023cfe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:d1:b4:c8:85:af:99:2c:a5:68:27:c6:35:78: 0e:00:e6:d0:8e:3b:08:5a:ca:c0:43:39:07:63:1b: 88:2e:bb:eb:c8:aa:df:49:0f:1b:b5:32:17:10:7e: 02:81:a4:a2:ab:45:b8:c1:59:0b:5c:51:cb:71:b7: 36:5c:8d:3c:f4:43:a5:b6:61:81:56:d4:11:c1:83: ff:81:81:1e:71:2b:85:a6:4f:0e:c4:30:db:9e:af: eb:42:22:0c:b8:5b:00:96:45:e9:c7:54:7a:d1:ba: 27:e1:b1:f1:7e:4b:fb:d1:71:19:a4:1e:95:1b:a3: 37:d1:ce:e8:41:80:c5:c7:48:93:18:e5:1f:8a:54: ad:69:fe:a2:d7:7c:07:67:29:01:be:1b:ce:33:49: 32:a8:d6:e4:c2:91:31:ae:32:b5:c8:e8:21:85:b9: f6:c6:03:a0:ca:96:ac:52:14:d5:17:7a:3c:38:af: a9:b0:5b:5f:12:86:c3:58:bb:9a:57:c0:16:8a:25: 94:a0:2b:eb:86:ad:57:31:a2:d5:69:39:e7:d9:c4: e9:54:7b:4e:cd:57:58:95:88:e5:68:4a:72:7e:61: 19:a3:eb:f4:19:3f:f5:d6:58:24:cd:2f:c7:80:a8: c0:72:d1:bf:39:f2:5b:e0:93:c1:3a:42:e8:af:87: d0:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:3D:26:8B:B5:D1:45:17:76:E9:5D:5D:38:5A:39:6D:D7:02:3C:FE X509v3 Authority Key Identifier: keyid:82:1A:3F:21:FB:0C:29:4D:6D:4A:52:9B:2F:1D:BD:4B:D1:11:9B:D7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gho_IfsMKU1tSlKbLx29S9ERm9c.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/edc855-f2bc-4e9c-8c0c-b6f2ac86ef27/1/gho_IfsMKU1tSlKbLx29S9ERm9c.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/12/edc855-f2bc-4e9c-8c0c-b6f2ac86ef27/1/gho_IfsMKU1tSlKbLx29S9ERm9c.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 03:fa:14:fe:37:34:a9:21:24:7a:6f:25:cb:e1:a5:96:40:10: 58:2f:b6:3a:67:0c:2e:da:63:0a:74:53:b4:ad:da:0f:d8:31: 26:88:83:88:3f:6e:e4:70:43:0a:05:6d:61:58:f4:87:cb:61: 5c:c7:8d:fd:90:30:85:1a:f6:3a:a6:67:86:65:3f:b4:df:fd: e1:4f:60:f1:53:b6:8b:77:a1:c0:dd:cb:cc:2f:cb:41:e4:ea: f6:f6:ad:9f:c1:a0:a5:e5:f9:3f:50:8e:2f:e2:e7:54:b8:a3: 81:37:81:19:59:65:21:86:da:0c:da:95:91:e5:a1:00:3a:21: 97:1e:4c:fe:73:44:ce:cb:66:2c:27:02:93:37:83:6d:f3:ed: c3:b5:87:b4:bf:ce:14:94:3c:3a:d9:37:f9:69:2d:bf:77:f7: eb:22:79:09:53:26:4e:0c:42:ca:64:f4:4e:30:31:67:75:6c: 06:7a:48:f9:8b:45:81:ad:56:0e:33:8e:fd:74:db:65:b2:fa: 6d:e3:c2:f4:60:21:26:99:e5:1b:1a:2a:0d:ca:06:07:2d:27: 3d:4e:32:9e:31:92:43:11:1d:63:4a:d5:a8:58:38:9f:93:15: 23:01:70:a0:40:ae:7a:54:91:c6:f7:03:51:40:04:81:b5:d4: 85:62:eb:7e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaFRP4U7Z8+NEaVznwfMVcXJMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDgyMWEzZjIxZmIwYzI5NGQ2ZDRhNTI5YjJmMWRiZDRiZDEx MTliZDcwHhcNMjYxMDE4MjMwMTE5WhcNMjYxMDE5MjMwMTE5WjAzMTEwLwYDVQQD EyhjMzNkMjY4YmI1ZDE0NTE3NzZlOTVkNWQzODVhMzk2ZGQ3MDIzY2ZlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmtG0yIWvmSylaCfGNXgOAObQjjsI WsrAQzkHYxuILrvryKrfSQ8btTIXEH4CgaSiq0W4wVkLXFHLcbc2XI089EOltmGB VtQRwYP/gYEecSuFpk8OxDDbnq/rQiIMuFsAlkXpx1R60bon4bHxfkv70XEZpB6V G6M30c7oQYDFx0iTGOUfilStaf6i13wHZykBvhvOM0kyqNbkwpExrjK1yOghhbn2 xgOgypasUhTVF3o8OK+psFtfEobDWLuaV8AWiiWUoCvrhq1XMaLVaTnn2cTpVHtO zVdYlYjlaEpyfmEZo+v0GT/11lgkzS/HgKjActG/OfJb4JPBOkLor4fQaQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMM9Jou10UUXduldXThaOW3XAjz+MB8GA1UdIwQY MBaAFIIaPyH7DClNbUpSmy8dvUvREZvXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZ2hvX0lmc01LVTF0U2xLYkx4MjlTOUVSbTljLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMi9lZGM4NTUtZjJiYy00ZTljLThjMGMt YjZmMmFjODZlZjI3LzEvZ2hvX0lmc01LVTF0U2xLYkx4MjlTOUVSbTljLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMi9lZGM4NTUtZjJiYy00ZTljLThjMGMtYjZmMmFjODZlZjI3 LzEvZ2hvX0lmc01LVTF0U2xLYkx4MjlTOUVSbTljLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAA/oU/jc0 qSEkem8ly+GllkAQWC+2OmcMLtpjCnRTtK3aD9gxJoiDiD9u5HBDCgVtYVj0h8th XMeN/ZAwhRr2OqZnhmU/tN/94U9g8VO2i3ehwN3LzC/LQeTq9vatn8GgpeX5P1CO L+LnVLijgTeBGVllIYbaDNqVkeWhADohlx5M/nNEzstmLCcCkzeDbfPtw7WHtL/O FJQ8Otk3+Wktv3f36yJ5CVMmTgxCymT0TjAxZ3VsBnpI+YtFga1WDjOO/XTbZbL6 bePC9GAhJpnlGxoqDcoGBy0nPU4ynjGSQxEdY0rVqFg4n5MVIwFwoECuelSRxvcD UUAEgbXUhWLrfg== -----END CERTIFICATE-----Generated at Mon Oct 19 04:12:43 2026 by rpki-client