$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/12/edc855-f2bc-4e9c-8c0c-b6f2ac86ef27/1/gho_IfsMKU1tSlKbLx29S9ERm9c.mft File: gho_IfsMKU1tSlKbLx29S9ERm9c.mft (raw, json) Hash identifier: nqy3LzYGm8WiDD0NiHquouYXJ8pwtQNyyj5qhzOBNi4= Subject key identifier: A1:A0:9D:90:6F:C2:B8:37:B4:1F:96:90:7F:E7:79:60:E6:6C:76:EF Authority key identifier: 82:1A:3F:21:FB:0C:29:4D:6D:4A:52:9B:2F:1D:BD:4B:D1:11:9B:D7 Certificate issuer: /CN=821a3f21fb0c294d6d4a529b2f1dbd4bd1119bd7 Certificate serial: 01A1551C20CB079C4C89AAD24A0974A030FE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gho_IfsMKU1tSlKbLx29S9ERm9c.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/edc855-f2bc-4e9c-8c0c-b6f2ac86ef27/1/gho_IfsMKU1tSlKbLx29S9ERm9c.mft Manifest number: 1517 Signing time: Mon 19 Oct 2026 17:01:09 +0000 Manifest this update: Mon 19 Oct 2026 17:01:09 +0000 Manifest next update: Tue 20 Oct 2026 17:01:09 +0000 Files and hashes: 1: 94DmWvO75aSCrTILT7xO5QfIZ4Q.roa (hash: yowEVWaH5JasWlMxUT7Mgz1/3iSP8rVz/KjlsGeBATs=) 2: I0ycopSi6_q86tsS_2ZsGMaSE7E.roa (hash: X5k67tgIigX44haykK5HKygDUVpwt1sPzwvIgtRhgUo=) 3: Lw_o47E9qYaZtJPZjp5m1M1e0_o.roa (hash: TnHpGib6gDq3lP3ubauOs2iA7D/xB8DKvaZF7GPTkuk=) 4: MRCItQ1B9948OVdVK1kL96AGPQI.roa (hash: ZQgpMxwvj3QAdwytn7kSRtX4MaK4Pcv8MlZ4Lzpi3Pg=) 5: OQ-6VTdp1vw9GrjNLFmvI9JYOrs.roa (hash: ZPmtBIJ2La5bnUm+sApv+AeoWDVjiZhyYSZEHB1jKmo=) 6: OxJM60qRQUOtdqYrv27xs3_kv9k.roa (hash: w3ZIUcbiJQn/X+ANNYduQprQtRgqv43tl64iIBJ+uVs=) 7: PujNlKftYzeQaE0MnZm0EPh4AFY.roa (hash: KOYoiHizuILiOcTb5DR0niku+PQ57DIf210w8rlbdQY=) 8: PyHODj5n0DejAoWrQZBIRXaXo6Y.roa (hash: 3ofBNW8DPxuvHoS9tkTr0YH1zUrrGyXEWYQ/aOGrjNI=) 9: RTPP9X2zvoR_qL8VtqZr6WEHKzw.roa (hash: bz39/MS5H8r1qd18PCFQ3+2kRu1MJoP1Vd1Xyr//BW0=) 10: WGYchnyCAbqQd8pzwZhRwcjvgv8.roa (hash: I9YjzWZ/pqf8yScr+6TqbtawBHd4EYuPwRC5bUBqVQw=) 11: Wz0IiveJRR3iZ_TFadI3Bt6mJJE.roa (hash: CImcnKPxhqg5cF+ps6Yupe+fhV0VE9C6rzuLTV7FS3Q=) 12: X2QsnfxAM9ScjVh_AzAztNDaXJg.roa (hash: L4YEdLYOkjYPPZMBRJDRYkJkVBQq0athDIG3eYPShmM=) 13: Z_IuqEKKfXuEOIP93u24e6BLk0E.roa (hash: 9YG/wmkjQ+naLweN0fWYFNb6KTTbRHlNigN8yWNOBNk=) 14: bjs_zJFuHzjoxK2NthqbKcV1s-8.roa (hash: Eg2O923oFj6n/iosVJD0SXVlsUTZEP0y964Jkw4vJR0=) 15: gho_IfsMKU1tSlKbLx29S9ERm9c.crl (hash: gAIC++ggXe0s/DymnQv0a/9SKy5EDjx068YkKIQod4Y=) 16: kELckgtwVoSvJeEmqDzRwJ_w8M4.roa (hash: ryrV6l1reh0IiB1vVcw5FXf5SQ2NaFZbF4Pl/NJCuQ4=) 17: u26dzWx1WsuAyPhRE3IG1GMmdJc.roa (hash: gEHPHjFqESUZPon7FHlszrJPYiDLqkhRmgKIOhvsfGY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/edc855-f2bc-4e9c-8c0c-b6f2ac86ef27/1/gho_IfsMKU1tSlKbLx29S9ERm9c.crl rsync://rpki.ripe.net/repository/DEFAULT/12/edc855-f2bc-4e9c-8c0c-b6f2ac86ef27/1/gho_IfsMKU1tSlKbLx29S9ERm9c.mft rsync://rpki.ripe.net/repository/DEFAULT/gho_IfsMKU1tSlKbLx29S9ERm9c.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Oct 2026 14:43:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a1:55:1c:20:cb:07:9c:4c:89:aa:d2:4a:09:74:a0:30:fe Signature Algorithm: sha256WithRSAEncryption Issuer: CN=821a3f21fb0c294d6d4a529b2f1dbd4bd1119bd7 Validity Not Before: Oct 19 17:01:09 2026 GMT Not After : Oct 20 17:01:09 2026 GMT Subject: CN=a1a09d906fc2b837b41f96907fe77960e66c76ef Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:1f:eb:59:15:75:17:f4:7b:18:09:ed:d8:49: 33:4d:57:39:c0:56:ba:a8:49:a8:74:d4:6b:3a:6a: 17:c8:47:c0:0c:00:d3:ad:d9:73:ba:db:a7:48:bc: 8e:5c:54:c7:55:53:cb:23:e2:da:07:5f:8c:6a:17: 69:1b:5c:83:bc:0d:cc:b4:f6:46:8c:51:b2:f4:37: 7b:c5:8c:1c:a4:af:01:6e:1e:f6:c2:c9:f8:0e:8a: 52:fc:7c:c0:83:ec:ba:0c:f5:68:92:7f:e4:a5:fc: 63:a3:a8:59:c5:d1:11:40:b6:da:82:3d:9a:8f:d8: cf:4b:18:d7:0e:ff:aa:28:5f:7a:5e:31:03:36:87: 13:8f:84:f5:7d:38:4d:93:97:a9:74:53:88:35:af: 50:fd:d7:1e:74:c8:06:40:ac:e9:05:1f:27:cb:95: c7:c6:a7:71:b0:a1:c5:c0:b5:2e:58:dd:fb:2c:a0: 51:29:47:ad:70:aa:63:91:75:db:af:08:f7:71:52: d0:b4:b1:b6:b6:65:29:d6:67:84:c6:22:6e:53:34: d1:1e:c3:ec:d9:63:7d:11:18:6d:03:c6:80:e4:6f: 53:48:71:ce:5f:12:c8:af:0f:d1:5a:ac:cf:78:a3: e2:cd:2c:4d:4c:27:7d:c9:85:78:ce:06:20:04:85: b0:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:A0:9D:90:6F:C2:B8:37:B4:1F:96:90:7F:E7:79:60:E6:6C:76:EF X509v3 Authority Key Identifier: keyid:82:1A:3F:21:FB:0C:29:4D:6D:4A:52:9B:2F:1D:BD:4B:D1:11:9B:D7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gho_IfsMKU1tSlKbLx29S9ERm9c.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/edc855-f2bc-4e9c-8c0c-b6f2ac86ef27/1/gho_IfsMKU1tSlKbLx29S9ERm9c.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/12/edc855-f2bc-4e9c-8c0c-b6f2ac86ef27/1/gho_IfsMKU1tSlKbLx29S9ERm9c.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption af:5b:d9:57:29:44:94:37:1b:8d:f3:ad:53:82:f4:5f:f4:16: 98:ee:8c:92:05:16:5b:e8:c7:73:00:a0:5e:a6:ed:bb:ac:ad: af:4f:00:4d:c4:85:7e:0d:ec:ef:ae:fb:f9:05:fc:6f:eb:84: 4f:b2:a9:e1:f2:bc:e3:7e:64:d8:dc:6f:84:9d:03:0c:8f:9d: 39:44:94:44:17:dc:46:1b:e4:5a:52:8a:fe:f1:85:00:4f:56: a7:63:ba:e2:4f:f2:0f:14:50:8e:54:95:25:62:b4:34:2c:e2: be:b4:58:bd:6d:c3:18:35:39:e5:77:06:c9:d6:c8:ee:2e:1d: 99:5f:ae:40:b0:32:b6:e9:17:32:fc:1c:14:9c:5a:17:ea:29: cb:bb:f6:89:a2:dc:44:74:d3:08:e2:1f:35:29:ad:99:37:6e: b2:be:1a:c6:7f:b5:b1:53:6c:b7:d2:3e:8b:2f:f9:dd:81:17: b7:32:1b:ce:75:d8:0f:97:e8:79:b9:55:5c:7d:80:da:f4:9f: 12:ab:be:b6:e5:80:3f:07:25:b2:2f:7d:9f:33:da:2c:79:e6: 6c:ac:0c:89:0e:9c:3b:2c:d0:86:6e:db:63:f6:b1:2f:92:7a: f5:e6:ff:2e:4a:6a:69:b9:5a:a0:83:12:d6:16:12:2b:6b:6d: c6:a2:17:2b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaFVHCDLB5xMiarSSgl0oDD+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDgyMWEzZjIxZmIwYzI5NGQ2ZDRhNTI5YjJmMWRiZDRiZDEx MTliZDcwHhcNMjYxMDE5MTcwMTA5WhcNMjYxMDIwMTcwMTA5WjAzMTEwLwYDVQQD EyhhMWEwOWQ5MDZmYzJiODM3YjQxZjk2OTA3ZmU3Nzk2MGU2NmM3NmVmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqh/rWRV1F/R7GAnt2EkzTVc5wFa6 qEmodNRrOmoXyEfADADTrdlzutunSLyOXFTHVVPLI+LaB1+MahdpG1yDvA3MtPZG jFGy9Dd7xYwcpK8Bbh72wsn4DopS/HzAg+y6DPVokn/kpfxjo6hZxdERQLbagj2a j9jPSxjXDv+qKF96XjEDNocTj4T1fThNk5epdFOINa9Q/dcedMgGQKzpBR8ny5XH xqdxsKHFwLUuWN37LKBRKUetcKpjkXXbrwj3cVLQtLG2tmUp1meExiJuUzTRHsPs 2WN9ERhtA8aA5G9TSHHOXxLIrw/RWqzPeKPizSxNTCd9yYV4zgYgBIWwMQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKGgnZBvwrg3tB+WkH/neWDmbHbvMB8GA1UdIwQY MBaAFIIaPyH7DClNbUpSmy8dvUvREZvXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZ2hvX0lmc01LVTF0U2xLYkx4MjlTOUVSbTljLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMi9lZGM4NTUtZjJiYy00ZTljLThjMGMt YjZmMmFjODZlZjI3LzEvZ2hvX0lmc01LVTF0U2xLYkx4MjlTOUVSbTljLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMi9lZGM4NTUtZjJiYy00ZTljLThjMGMtYjZmMmFjODZlZjI3 LzEvZ2hvX0lmc01LVTF0U2xLYkx4MjlTOUVSbTljLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAr1vZVylE lDcbjfOtU4L0X/QWmO6MkgUWW+jHcwCgXqbtu6ytr08ATcSFfg3s7677+QX8b+uE T7Kp4fK8435k2NxvhJ0DDI+dOUSURBfcRhvkWlKK/vGFAE9Wp2O64k/yDxRQjlSV JWK0NCzivrRYvW3DGDU55XcGydbI7i4dmV+uQLAytukXMvwcFJxaF+opy7v2iaLc RHTTCOIfNSmtmTdusr4axn+1sVNst9I+iy/53YEXtzIbznXYD5foeblVXH2A2vSf Equ+tuWAPwclsi99nzPaLHnmbKwMiQ6cOyzQhm7bY/axL5J69eb/LkpqablaoIMS 1hYSK2ttxqIXKw== -----END CERTIFICATE-----Generated at Tue Oct 20 02:55:20 2026 by rpki-client