
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/edc855-f2bc-4e9c-8c0c-b6f2ac86ef27/1/gho_IfsMKU1tSlKbLx29S9ERm9c.mft
File: gho_IfsMKU1tSlKbLx29S9ERm9c.mft (raw, json)
Hash identifier: K66FZTx1qlv02RnQJcR49Q3bpPphRyk9IpzEXOzeIp4=
Subject key identifier: 60:3C:EB:36:E1:4D:74:70:42:98:4B:55:65:66:EB:CD:49:2D:42:D0
Authority key identifier: 82:1A:3F:21:FB:0C:29:4D:6D:4A:52:9B:2F:1D:BD:4B:D1:11:9B:D7
Certificate issuer: /CN=821a3f21fb0c294d6d4a529b2f1dbd4bd1119bd7
Certificate serial: 019FD8054EB3D00B4653E823D942F83079F2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gho_IfsMKU1tSlKbLx29S9ERm9c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/edc855-f2bc-4e9c-8c0c-b6f2ac86ef27/1/gho_IfsMKU1tSlKbLx29S9ERm9c.mft
Manifest number: 1451
Signing time: Thu 06 Aug 2026 17:00:54 +0000
Manifest this update: Thu 06 Aug 2026 17:00:54 +0000
Manifest next update: Fri 07 Aug 2026 17:00:54 +0000
Files and hashes: 1: 94DmWvO75aSCrTILT7xO5QfIZ4Q.roa (hash: yowEVWaH5JasWlMxUT7Mgz1/3iSP8rVz/KjlsGeBATs=)
2: I0ycopSi6_q86tsS_2ZsGMaSE7E.roa (hash: X5k67tgIigX44haykK5HKygDUVpwt1sPzwvIgtRhgUo=)
3: Lw_o47E9qYaZtJPZjp5m1M1e0_o.roa (hash: TnHpGib6gDq3lP3ubauOs2iA7D/xB8DKvaZF7GPTkuk=)
4: MRCItQ1B9948OVdVK1kL96AGPQI.roa (hash: ZQgpMxwvj3QAdwytn7kSRtX4MaK4Pcv8MlZ4Lzpi3Pg=)
5: OQ-6VTdp1vw9GrjNLFmvI9JYOrs.roa (hash: ZPmtBIJ2La5bnUm+sApv+AeoWDVjiZhyYSZEHB1jKmo=)
6: OxJM60qRQUOtdqYrv27xs3_kv9k.roa (hash: w3ZIUcbiJQn/X+ANNYduQprQtRgqv43tl64iIBJ+uVs=)
7: PujNlKftYzeQaE0MnZm0EPh4AFY.roa (hash: KOYoiHizuILiOcTb5DR0niku+PQ57DIf210w8rlbdQY=)
8: PyHODj5n0DejAoWrQZBIRXaXo6Y.roa (hash: 3ofBNW8DPxuvHoS9tkTr0YH1zUrrGyXEWYQ/aOGrjNI=)
9: RTPP9X2zvoR_qL8VtqZr6WEHKzw.roa (hash: bz39/MS5H8r1qd18PCFQ3+2kRu1MJoP1Vd1Xyr//BW0=)
10: WGYchnyCAbqQd8pzwZhRwcjvgv8.roa (hash: I9YjzWZ/pqf8yScr+6TqbtawBHd4EYuPwRC5bUBqVQw=)
11: Wz0IiveJRR3iZ_TFadI3Bt6mJJE.roa (hash: CImcnKPxhqg5cF+ps6Yupe+fhV0VE9C6rzuLTV7FS3Q=)
12: X2QsnfxAM9ScjVh_AzAztNDaXJg.roa (hash: L4YEdLYOkjYPPZMBRJDRYkJkVBQq0athDIG3eYPShmM=)
13: Z_IuqEKKfXuEOIP93u24e6BLk0E.roa (hash: 9YG/wmkjQ+naLweN0fWYFNb6KTTbRHlNigN8yWNOBNk=)
14: gho_IfsMKU1tSlKbLx29S9ERm9c.crl (hash: lgwkSU3xjePcIPaSUteo9MYJcpg/+I+pucZhWKbGs2I=)
15: kELckgtwVoSvJeEmqDzRwJ_w8M4.roa (hash: ryrV6l1reh0IiB1vVcw5FXf5SQ2NaFZbF4Pl/NJCuQ4=)
16: u26dzWx1WsuAyPhRE3IG1GMmdJc.roa (hash: gEHPHjFqESUZPon7FHlszrJPYiDLqkhRmgKIOhvsfGY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/edc855-f2bc-4e9c-8c0c-b6f2ac86ef27/1/gho_IfsMKU1tSlKbLx29S9ERm9c.crl
rsync://rpki.ripe.net/repository/DEFAULT/12/edc855-f2bc-4e9c-8c0c-b6f2ac86ef27/1/gho_IfsMKU1tSlKbLx29S9ERm9c.mft
rsync://rpki.ripe.net/repository/DEFAULT/gho_IfsMKU1tSlKbLx29S9ERm9c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 07 Aug 2026 17:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:d8:05:4e:b3:d0:0b:46:53:e8:23:d9:42:f8:30:79:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=821a3f21fb0c294d6d4a529b2f1dbd4bd1119bd7
Validity
Not Before: Aug 6 17:00:54 2026 GMT
Not After : Aug 7 17:00:54 2026 GMT
Subject: CN=603ceb36e14d747042984b556566ebcd492d42d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:51:e3:c4:a2:78:90:53:8c:f4:f4:0f:40:b5:
b1:68:8b:24:87:1f:f5:ae:5d:50:91:da:07:e2:11:
1f:91:8d:62:08:4d:80:f2:d0:18:cc:6d:fc:82:7d:
81:75:52:ab:2d:10:e2:b3:fd:b8:25:fa:2a:49:5b:
b5:a2:ef:36:e6:ef:3b:8a:8f:76:c5:79:c6:d1:af:
25:57:dc:be:f8:e5:36:36:b2:65:2c:c7:5d:94:47:
af:7c:08:1e:d8:fb:05:53:33:a4:25:b0:17:69:bf:
8a:7d:1e:38:a9:15:b9:42:96:8c:ac:ac:7b:ac:c3:
6d:fc:26:c0:b9:61:55:49:6c:04:ba:e3:ce:97:05:
70:7b:76:1a:11:43:9d:82:eb:f1:50:b8:79:73:61:
a0:0d:06:45:0f:32:c4:80:3d:5a:8f:09:e2:11:4f:
c2:0d:9b:e1:a1:87:fe:03:f8:a8:d2:4f:f0:97:aa:
21:f3:09:b5:0b:27:30:cb:ae:cd:57:4b:bb:bd:37:
35:ba:19:9f:2f:6b:81:6c:59:74:50:56:8b:d0:53:
bc:e4:a7:5c:29:fc:57:bb:3c:66:11:63:a1:88:2a:
7c:b9:4b:2a:d9:85:21:12:f1:eb:12:5b:f9:97:3b:
51:d9:3a:28:fc:41:0c:96:08:12:4b:a3:1b:69:39:
0d:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:3C:EB:36:E1:4D:74:70:42:98:4B:55:65:66:EB:CD:49:2D:42:D0
X509v3 Authority Key Identifier:
keyid:82:1A:3F:21:FB:0C:29:4D:6D:4A:52:9B:2F:1D:BD:4B:D1:11:9B:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gho_IfsMKU1tSlKbLx29S9ERm9c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/edc855-f2bc-4e9c-8c0c-b6f2ac86ef27/1/gho_IfsMKU1tSlKbLx29S9ERm9c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/edc855-f2bc-4e9c-8c0c-b6f2ac86ef27/1/gho_IfsMKU1tSlKbLx29S9ERm9c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:3c:be:ec:3f:b0:09:d5:5b:23:81:a1:5a:88:6c:a7:3f:a8:
0b:b9:4a:ee:24:e9:95:95:f5:12:c0:f6:41:0f:bb:01:8c:65:
89:f2:05:dd:0f:08:f1:55:47:9a:63:75:7d:3d:a4:69:23:d2:
d9:e3:7f:34:00:45:b5:0a:24:12:62:04:01:ca:6b:1d:d2:b8:
23:4e:fe:68:bf:5b:28:65:e1:ac:5d:26:8e:06:89:47:01:73:
3f:0a:d8:1c:de:9c:3a:b5:77:ee:9b:7b:d5:b1:5f:4a:01:fd:
f2:f2:e7:76:fa:f5:59:53:3b:21:c7:c5:33:69:bd:02:31:89:
25:d9:87:25:52:ea:f2:5a:22:91:3d:9d:b8:85:f3:27:d4:a6:
e1:48:8a:ca:6b:13:ea:64:69:26:2e:e9:78:28:50:8f:c3:b2:
2a:69:d1:e6:92:17:de:fe:5f:1b:44:21:77:07:63:aa:8e:73:
a0:8e:18:61:eb:41:c4:54:1e:e9:5b:e8:dd:b5:9a:a3:15:46:
4e:44:3c:22:ea:9d:b7:ae:70:be:df:c6:44:4f:92:ab:30:7c:
a1:92:ed:db:c5:e4:bb:b3:65:c9:40:36:1d:54:5e:50:57:d9:
83:f4:24:7e:db:6f:be:b8:29:b9:67:14:80:ca:34:6c:77:b7:
94:cf:44:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 7 01:25:21 2026 by rpki-client