$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/edc855-f2bc-4e9c-8c0c-b6f2ac86ef27/1/gho_IfsMKU1tSlKbLx29S9ERm9c.mft File: gho_IfsMKU1tSlKbLx29S9ERm9c.mft (raw, json) Hash identifier: K0kaEMTjXAvfGU5UEfTof5XwKkoKU5JVPgCu5W6l5q0= Subject key identifier: 18:B5:24:B3:59:83:5F:AA:F7:85:84:00:23:28:F6:0D:75:9E:D6:FE Authority key identifier: 82:1A:3F:21:FB:0C:29:4D:6D:4A:52:9B:2F:1D:BD:4B:D1:11:9B:D7 Certificate issuer: /CN=821a3f21fb0c294d6d4a529b2f1dbd4bd1119bd7 Certificate serial: 019D81C98FD76B482E6595F848084AF7836F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gho_IfsMKU1tSlKbLx29S9ERm9c.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/edc855-f2bc-4e9c-8c0c-b6f2ac86ef27/1/gho_IfsMKU1tSlKbLx29S9ERm9c.mft Manifest number: 1318 Signing time: Sun 12 Apr 2026 13:02:43 +0000 Manifest this update: Sun 12 Apr 2026 13:02:43 +0000 Manifest next update: Mon 13 Apr 2026 13:02:43 +0000 Files and hashes: 1: 2FTZk29N4ByQY45BtJSQSIVpVRM.roa (hash: rAVovOm/njZtMMmGMfPRxJdixQBe2en8/pj68uz5a98=) 2: 6r3q3z9OFjrJ9qoUTQKhOroMbaM.roa (hash: 29mycutC5foPo3U8nHm9mrCTYw4984xkZIx+WiI1F9M=) 3: 94DmWvO75aSCrTILT7xO5QfIZ4Q.roa (hash: yowEVWaH5JasWlMxUT7Mgz1/3iSP8rVz/KjlsGeBATs=) 4: Lw_o47E9qYaZtJPZjp5m1M1e0_o.roa (hash: TnHpGib6gDq3lP3ubauOs2iA7D/xB8DKvaZF7GPTkuk=) 5: MRCItQ1B9948OVdVK1kL96AGPQI.roa (hash: ZQgpMxwvj3QAdwytn7kSRtX4MaK4Pcv8MlZ4Lzpi3Pg=) 6: OFjegJjxvcb4sj9nFgT2lfhHX4s.roa (hash: IYubfyClKzPMzSFo0EthrRHOvnb4H46ku4bTbgAoW7k=) 7: OKCXW7_MWWto3GWe7wi0avKoJxY.roa (hash: WqcSKwFHiTej52k827avLCbdmV9f2szfzxuzHTMps/4=) 8: OQ-6VTdp1vw9GrjNLFmvI9JYOrs.roa (hash: ZPmtBIJ2La5bnUm+sApv+AeoWDVjiZhyYSZEHB1jKmo=) 9: OxJM60qRQUOtdqYrv27xs3_kv9k.roa (hash: w3ZIUcbiJQn/X+ANNYduQprQtRgqv43tl64iIBJ+uVs=) 10: PyHODj5n0DejAoWrQZBIRXaXo6Y.roa (hash: 3ofBNW8DPxuvHoS9tkTr0YH1zUrrGyXEWYQ/aOGrjNI=) 11: WGYchnyCAbqQd8pzwZhRwcjvgv8.roa (hash: I9YjzWZ/pqf8yScr+6TqbtawBHd4EYuPwRC5bUBqVQw=) 12: Wz0IiveJRR3iZ_TFadI3Bt6mJJE.roa (hash: CImcnKPxhqg5cF+ps6Yupe+fhV0VE9C6rzuLTV7FS3Q=) 13: X2QsnfxAM9ScjVh_AzAztNDaXJg.roa (hash: L4YEdLYOkjYPPZMBRJDRYkJkVBQq0athDIG3eYPShmM=) 14: Z_IuqEKKfXuEOIP93u24e6BLk0E.roa (hash: 9YG/wmkjQ+naLweN0fWYFNb6KTTbRHlNigN8yWNOBNk=) 15: gho_IfsMKU1tSlKbLx29S9ERm9c.crl (hash: oRclVfP5aUc8tLg3dXfY7+kKp9NQWPClH2AN7GN5YUg=) 16: t4R25ZXPVStjauKJN0GTtODr3yU.roa (hash: g5h7UJb9yZQYOvckJX3+K/kTtGb30JhlTLu3Ss9IriI=) 17: u26dzWx1WsuAyPhRE3IG1GMmdJc.roa (hash: gEHPHjFqESUZPon7FHlszrJPYiDLqkhRmgKIOhvsfGY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/edc855-f2bc-4e9c-8c0c-b6f2ac86ef27/1/gho_IfsMKU1tSlKbLx29S9ERm9c.crl rsync://rpki.ripe.net/repository/DEFAULT/12/edc855-f2bc-4e9c-8c0c-b6f2ac86ef27/1/gho_IfsMKU1tSlKbLx29S9ERm9c.mft rsync://rpki.ripe.net/repository/DEFAULT/gho_IfsMKU1tSlKbLx29S9ERm9c.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 13 Apr 2026 13:02:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9d:81:c9:8f:d7:6b:48:2e:65:95:f8:48:08:4a:f7:83:6f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=821a3f21fb0c294d6d4a529b2f1dbd4bd1119bd7 Validity Not Before: Apr 12 13:02:43 2026 GMT Not After : Apr 13 13:02:43 2026 GMT Subject: CN=18b524b359835faaf78584002328f60d759ed6fe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:8e:1f:79:98:e0:22:ff:0b:61:0b:37:ea:2c: c2:24:d7:c4:f6:da:c2:44:e9:71:64:31:13:76:e3: 9b:92:1d:17:12:06:ff:b3:15:cc:c9:c0:85:27:04: 00:35:1d:b2:1b:a2:83:ab:2a:13:36:a9:33:3d:e7: 2d:04:a9:b3:19:f2:5e:67:6e:90:3b:6c:29:b5:64: 4e:db:ab:01:dc:2f:2f:70:10:2d:fb:fc:62:bb:02: 71:97:de:73:d5:a4:47:a3:a1:55:2c:41:8d:64:b4: 7a:1b:57:9d:3b:39:d3:fd:b6:c3:d8:06:71:c7:a4: 80:05:bf:ef:95:c8:86:e8:2f:c4:38:f0:e9:f8:11: 9c:a4:a0:27:77:70:01:c1:07:f8:f3:79:1b:67:57: 8c:e8:3a:5d:25:e3:bb:33:3d:f9:86:e5:a5:0d:dc: d5:2c:23:81:b1:f2:9f:2f:05:d6:a7:2c:f3:0f:0a: d3:14:47:86:a9:90:b3:87:b6:1e:f6:cd:b9:1c:24: ff:14:35:46:da:ad:c0:11:15:6c:f5:60:2a:7f:9b: 1e:28:56:1d:d1:9e:91:e0:b1:27:35:80:7b:7c:70: ed:71:2a:c3:0d:22:60:a1:4b:52:bd:7c:49:b5:52: dc:f5:a8:34:47:f0:a7:92:a0:74:16:25:91:01:0a: b6:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:B5:24:B3:59:83:5F:AA:F7:85:84:00:23:28:F6:0D:75:9E:D6:FE X509v3 Authority Key Identifier: keyid:82:1A:3F:21:FB:0C:29:4D:6D:4A:52:9B:2F:1D:BD:4B:D1:11:9B:D7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gho_IfsMKU1tSlKbLx29S9ERm9c.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/edc855-f2bc-4e9c-8c0c-b6f2ac86ef27/1/gho_IfsMKU1tSlKbLx29S9ERm9c.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/12/edc855-f2bc-4e9c-8c0c-b6f2ac86ef27/1/gho_IfsMKU1tSlKbLx29S9ERm9c.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 98:7f:da:a5:4e:c5:8c:49:6a:34:52:23:42:0f:29:e4:22:95: d0:9b:03:4c:f8:c8:4a:7a:49:e9:f8:05:b1:84:ff:0a:8c:90: cd:d3:2a:60:71:b5:08:8f:f3:87:d2:54:33:59:8e:d7:b7:71: 4e:f6:0f:e2:e4:4d:49:67:76:0d:fd:42:7c:a9:03:da:f4:46: 57:44:dd:7b:67:58:6e:80:c4:6e:ed:69:8d:f6:61:a1:1b:02: f4:5c:e2:03:5f:b1:63:99:06:20:3a:f0:29:d0:4e:49:bc:36: 70:e5:9f:22:0a:97:95:f3:77:8d:87:c9:c7:d0:b6:64:a6:05: cf:a7:86:0f:77:2a:6d:47:0b:f5:90:c3:0e:30:5e:cd:ba:8c: 30:7c:46:55:e6:e4:bb:da:8b:e9:33:d3:e1:fb:73:5c:7d:a0: 3e:80:f7:7c:fc:f0:63:4f:83:e5:17:b4:ac:b4:7b:d0:09:30: 3e:e0:cb:ae:cb:b9:93:b9:87:8f:bd:7b:c7:57:ae:fe:24:56: 87:04:75:8d:99:9b:8a:b5:80:10:e6:2b:f3:ff:90:ae:e3:19: b4:bd:82:ca:05:89:db:38:68:e3:a7:1c:52:9f:0f:f9:8e:d5: 03:c6:8e:a6:49:19:32:f1:0a:76:4a:f0:e0:d3:a4:2d:c0:c0: 06:e8:d8:28 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ2ByY/Xa0guZZX4SAhK94NvMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDgyMWEzZjIxZmIwYzI5NGQ2ZDRhNTI5YjJmMWRiZDRiZDEx MTliZDcwHhcNMjYwNDEyMTMwMjQzWhcNMjYwNDEzMTMwMjQzWjAzMTEwLwYDVQQD EygxOGI1MjRiMzU5ODM1ZmFhZjc4NTg0MDAyMzI4ZjYwZDc1OWVkNmZlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr44feZjgIv8LYQs36izCJNfE9trC ROlxZDETduObkh0XEgb/sxXMycCFJwQANR2yG6KDqyoTNqkzPectBKmzGfJeZ26Q O2wptWRO26sB3C8vcBAt+/xiuwJxl95z1aRHo6FVLEGNZLR6G1edOznT/bbD2AZx x6SABb/vlciG6C/EOPDp+BGcpKAnd3ABwQf483kbZ1eM6DpdJeO7Mz35huWlDdzV LCOBsfKfLwXWpyzzDwrTFEeGqZCzh7Ye9s25HCT/FDVG2q3AERVs9WAqf5seKFYd 0Z6R4LEnNYB7fHDtcSrDDSJgoUtSvXxJtVLc9ag0R/CnkqB0FiWRAQq2XwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBi1JLNZg1+q94WEACMo9g11ntb+MB8GA1UdIwQY MBaAFIIaPyH7DClNbUpSmy8dvUvREZvXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZ2hvX0lmc01LVTF0U2xLYkx4MjlTOUVSbTljLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMi9lZGM4NTUtZjJiYy00ZTljLThjMGMt YjZmMmFjODZlZjI3LzEvZ2hvX0lmc01LVTF0U2xLYkx4MjlTOUVSbTljLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMi9lZGM4NTUtZjJiYy00ZTljLThjMGMtYjZmMmFjODZlZjI3 LzEvZ2hvX0lmc01LVTF0U2xLYkx4MjlTOUVSbTljLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmH/apU7F jElqNFIjQg8p5CKV0JsDTPjISnpJ6fgFsYT/CoyQzdMqYHG1CI/zh9JUM1mO17dx TvYP4uRNSWd2Df1CfKkD2vRGV0Tde2dYboDEbu1pjfZhoRsC9FziA1+xY5kGIDrw KdBOSbw2cOWfIgqXlfN3jYfJx9C2ZKYFz6eGD3cqbUcL9ZDDDjBezbqMMHxGVebk u9qL6TPT4ftzXH2gPoD3fPzwY0+D5Re0rLR70AkwPuDLrsu5k7mHj717x1eu/iRW hwR1jZmbirWAEOYr8/+QruMZtL2CygWJ2zho46ccUp8P+Y7VA8aOpkkZMvEKdkrw 4NOkLcDABujYKA== -----END CERTIFICATE-----Generated at Sun Apr 12 22:17:03 2026 by rpki-client