$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/12/edc855-f2bc-4e9c-8c0c-b6f2ac86ef27/1/gho_IfsMKU1tSlKbLx29S9ERm9c.mft File: gho_IfsMKU1tSlKbLx29S9ERm9c.mft (raw, json) Hash identifier: vt8lT5/RVoVpi7fIZqbr4tWbDUBhaFVnNg6rQS71GHM= Subject key identifier: EF:F2:AE:DE:D1:BF:A8:F6:75:FB:17:1F:D0:A4:66:2B:6A:B4:35:9D Authority key identifier: 82:1A:3F:21:FB:0C:29:4D:6D:4A:52:9B:2F:1D:BD:4B:D1:11:9B:D7 Certificate issuer: /CN=821a3f21fb0c294d6d4a529b2f1dbd4bd1119bd7 Certificate serial: 01A0CA1003C7E60190AEE1E86A3AD7F7A302 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gho_IfsMKU1tSlKbLx29S9ERm9c.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/edc855-f2bc-4e9c-8c0c-b6f2ac86ef27/1/gho_IfsMKU1tSlKbLx29S9ERm9c.mft Manifest number: 14CF Signing time: Tue 22 Sep 2026 17:00:42 +0000 Manifest this update: Tue 22 Sep 2026 17:00:42 +0000 Manifest next update: Wed 23 Sep 2026 17:00:42 +0000 Files and hashes: 1: 94DmWvO75aSCrTILT7xO5QfIZ4Q.roa (hash: yowEVWaH5JasWlMxUT7Mgz1/3iSP8rVz/KjlsGeBATs=) 2: I0ycopSi6_q86tsS_2ZsGMaSE7E.roa (hash: X5k67tgIigX44haykK5HKygDUVpwt1sPzwvIgtRhgUo=) 3: Lw_o47E9qYaZtJPZjp5m1M1e0_o.roa (hash: TnHpGib6gDq3lP3ubauOs2iA7D/xB8DKvaZF7GPTkuk=) 4: MRCItQ1B9948OVdVK1kL96AGPQI.roa (hash: ZQgpMxwvj3QAdwytn7kSRtX4MaK4Pcv8MlZ4Lzpi3Pg=) 5: OQ-6VTdp1vw9GrjNLFmvI9JYOrs.roa (hash: ZPmtBIJ2La5bnUm+sApv+AeoWDVjiZhyYSZEHB1jKmo=) 6: OxJM60qRQUOtdqYrv27xs3_kv9k.roa (hash: w3ZIUcbiJQn/X+ANNYduQprQtRgqv43tl64iIBJ+uVs=) 7: PujNlKftYzeQaE0MnZm0EPh4AFY.roa (hash: KOYoiHizuILiOcTb5DR0niku+PQ57DIf210w8rlbdQY=) 8: PyHODj5n0DejAoWrQZBIRXaXo6Y.roa (hash: 3ofBNW8DPxuvHoS9tkTr0YH1zUrrGyXEWYQ/aOGrjNI=) 9: RTPP9X2zvoR_qL8VtqZr6WEHKzw.roa (hash: bz39/MS5H8r1qd18PCFQ3+2kRu1MJoP1Vd1Xyr//BW0=) 10: WGYchnyCAbqQd8pzwZhRwcjvgv8.roa (hash: I9YjzWZ/pqf8yScr+6TqbtawBHd4EYuPwRC5bUBqVQw=) 11: Wz0IiveJRR3iZ_TFadI3Bt6mJJE.roa (hash: CImcnKPxhqg5cF+ps6Yupe+fhV0VE9C6rzuLTV7FS3Q=) 12: X2QsnfxAM9ScjVh_AzAztNDaXJg.roa (hash: L4YEdLYOkjYPPZMBRJDRYkJkVBQq0athDIG3eYPShmM=) 13: Z_IuqEKKfXuEOIP93u24e6BLk0E.roa (hash: 9YG/wmkjQ+naLweN0fWYFNb6KTTbRHlNigN8yWNOBNk=) 14: bjs_zJFuHzjoxK2NthqbKcV1s-8.roa (hash: Eg2O923oFj6n/iosVJD0SXVlsUTZEP0y964Jkw4vJR0=) 15: gho_IfsMKU1tSlKbLx29S9ERm9c.crl (hash: EeKwAoSchnUZ3sFLaxCDjHRPsEqKqt4hGWarEUCZq/w=) 16: kELckgtwVoSvJeEmqDzRwJ_w8M4.roa (hash: ryrV6l1reh0IiB1vVcw5FXf5SQ2NaFZbF4Pl/NJCuQ4=) 17: u26dzWx1WsuAyPhRE3IG1GMmdJc.roa (hash: gEHPHjFqESUZPon7FHlszrJPYiDLqkhRmgKIOhvsfGY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/edc855-f2bc-4e9c-8c0c-b6f2ac86ef27/1/gho_IfsMKU1tSlKbLx29S9ERm9c.crl rsync://rpki.ripe.net/repository/DEFAULT/12/edc855-f2bc-4e9c-8c0c-b6f2ac86ef27/1/gho_IfsMKU1tSlKbLx29S9ERm9c.mft rsync://rpki.ripe.net/repository/DEFAULT/gho_IfsMKU1tSlKbLx29S9ERm9c.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 23 Sep 2026 17:00:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a0:ca:10:03:c7:e6:01:90:ae:e1:e8:6a:3a:d7:f7:a3:02 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=821a3f21fb0c294d6d4a529b2f1dbd4bd1119bd7 Validity Not Before: Sep 22 17:00:42 2026 GMT Not After : Sep 23 17:00:42 2026 GMT Subject: CN=eff2aeded1bfa8f675fb171fd0a4662b6ab4359d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:4f:d6:36:66:ca:8d:1f:98:4a:c9:d7:8c:34: e3:7e:02:ee:53:02:42:d4:af:97:18:48:72:b0:28: e0:1d:71:fe:2b:35:ce:ea:86:f9:3e:17:e2:1e:35: 7c:f3:75:63:19:86:9b:40:fb:c4:ba:d1:ec:0a:e5: 8f:05:52:e7:25:64:48:4d:21:f9:12:02:57:50:71: 4a:61:11:fb:02:b3:4a:65:9f:42:99:7c:a8:28:ea: 6a:37:2f:50:23:42:81:5a:79:cf:c8:19:9f:02:cf: 28:e9:3b:4c:15:15:be:d5:1c:27:62:de:53:5c:2d: 8c:85:13:2f:61:06:70:16:03:0a:0f:22:7d:6d:45: 48:4d:a6:c5:f1:06:8d:f7:00:65:d9:a7:04:90:94: c1:df:6e:9a:39:2e:92:bd:57:2a:ff:c5:b5:7e:a5: c5:73:3e:e2:bb:d6:0a:63:32:a3:4c:5f:0d:19:5a: ea:dc:98:28:a4:60:19:7c:52:75:dc:e3:2f:60:bf: 10:45:d0:d5:84:2b:59:cc:b5:4d:07:d7:ca:f9:3c: 44:da:dd:cb:0d:69:fc:a7:2a:c6:52:25:b8:94:bf: 1d:e6:fc:21:6c:dd:34:26:c4:7e:d5:08:68:5c:82: a1:c4:14:21:70:1c:73:63:f1:d9:af:fd:ff:c8:b4: b5:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EF:F2:AE:DE:D1:BF:A8:F6:75:FB:17:1F:D0:A4:66:2B:6A:B4:35:9D X509v3 Authority Key Identifier: keyid:82:1A:3F:21:FB:0C:29:4D:6D:4A:52:9B:2F:1D:BD:4B:D1:11:9B:D7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gho_IfsMKU1tSlKbLx29S9ERm9c.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/edc855-f2bc-4e9c-8c0c-b6f2ac86ef27/1/gho_IfsMKU1tSlKbLx29S9ERm9c.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/12/edc855-f2bc-4e9c-8c0c-b6f2ac86ef27/1/gho_IfsMKU1tSlKbLx29S9ERm9c.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2f:61:5d:d4:29:1a:25:1b:41:6f:9d:fb:bb:44:74:75:ad:3b: 79:a9:02:a9:d1:6f:01:bb:d9:2d:c2:63:44:a4:67:10:96:56: b9:a4:4b:71:25:88:ae:57:4a:76:c0:22:ec:75:f0:dd:46:c5: c1:95:b6:57:c7:2b:77:c6:90:49:20:64:1c:c3:f8:38:4b:de: 78:80:d9:24:2a:25:fb:1b:4b:9c:2c:e1:b8:f2:1b:2e:d1:4f: cf:b1:64:a0:c7:4d:38:63:2e:97:3b:22:c1:22:d3:8a:2b:3e: 05:b0:ce:2c:00:d3:2c:fc:1d:45:8b:2c:2c:f9:70:17:a9:dd: eb:57:bd:21:3e:58:52:f8:9e:67:75:94:27:c5:5c:73:ee:70: 9b:0f:7f:58:65:27:ea:b8:1c:5e:49:40:74:4d:3d:3f:a4:35: 92:3b:67:e8:f9:94:21:f2:23:ce:3d:37:53:33:b2:08:b4:ab: ee:3f:14:0d:4a:b3:66:f5:2e:64:b5:ac:a0:5f:90:53:05:99: 18:84:e1:cd:e3:18:75:d7:c6:e7:16:bc:d3:3c:0d:cf:3c:03: 91:49:04:e4:b1:d2:d1:1f:5d:da:a0:0d:5e:ab:f1:50:23:ae: 95:64:29:22:f3:df:32:e3:b1:1d:bf:ca:ce:22:be:05:85:10: 57:93:4d:02 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaDKEAPH5gGQruHoajrX96MCMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDgyMWEzZjIxZmIwYzI5NGQ2ZDRhNTI5YjJmMWRiZDRiZDEx MTliZDcwHhcNMjYwOTIyMTcwMDQyWhcNMjYwOTIzMTcwMDQyWjAzMTEwLwYDVQQD EyhlZmYyYWVkZWQxYmZhOGY2NzVmYjE3MWZkMGE0NjYyYjZhYjQzNTlkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuk/WNmbKjR+YSsnXjDTjfgLuUwJC 1K+XGEhysCjgHXH+KzXO6ob5PhfiHjV883VjGYabQPvEutHsCuWPBVLnJWRITSH5 EgJXUHFKYRH7ArNKZZ9CmXyoKOpqNy9QI0KBWnnPyBmfAs8o6TtMFRW+1RwnYt5T XC2MhRMvYQZwFgMKDyJ9bUVITabF8QaN9wBl2acEkJTB326aOS6SvVcq/8W1fqXF cz7iu9YKYzKjTF8NGVrq3JgopGAZfFJ13OMvYL8QRdDVhCtZzLVNB9fK+TxE2t3L DWn8pyrGUiW4lL8d5vwhbN00JsR+1QhoXIKhxBQhcBxzY/HZr/3/yLS15wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFO/yrt7Rv6j2dfsXH9CkZitqtDWdMB8GA1UdIwQY MBaAFIIaPyH7DClNbUpSmy8dvUvREZvXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZ2hvX0lmc01LVTF0U2xLYkx4MjlTOUVSbTljLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMi9lZGM4NTUtZjJiYy00ZTljLThjMGMt YjZmMmFjODZlZjI3LzEvZ2hvX0lmc01LVTF0U2xLYkx4MjlTOUVSbTljLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMi9lZGM4NTUtZjJiYy00ZTljLThjMGMtYjZmMmFjODZlZjI3 LzEvZ2hvX0lmc01LVTF0U2xLYkx4MjlTOUVSbTljLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAL2Fd1Cka JRtBb537u0R0da07eakCqdFvAbvZLcJjRKRnEJZWuaRLcSWIrldKdsAi7HXw3UbF wZW2V8crd8aQSSBkHMP4OEveeIDZJCol+xtLnCzhuPIbLtFPz7FkoMdNOGMulzsi wSLTiis+BbDOLADTLPwdRYssLPlwF6nd61e9IT5YUvieZ3WUJ8Vcc+5wmw9/WGUn 6rgcXklAdE09P6Q1kjtn6PmUIfIjzj03UzOyCLSr7j8UDUqzZvUuZLWsoF+QUwWZ GIThzeMYddfG5xa80zwNzzwDkUkE5LHS0R9d2qANXqvxUCOulWQpIvPfMuOxHb/K ziK+BYUQV5NNAg== -----END CERTIFICATE-----Generated at Wed Sep 23 01:22:57 2026 by rpki-client