$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/12/edc855-f2bc-4e9c-8c0c-b6f2ac86ef27/1/gho_IfsMKU1tSlKbLx29S9ERm9c.mft File: gho_IfsMKU1tSlKbLx29S9ERm9c.mft (raw, json) Hash identifier: ou5UEf4Wyb9ZqxEi/CWFdpuAyEQYiQ64qXnEtwoVRCE= Subject key identifier: 6F:2F:71:8E:05:A8:F9:F9:2F:DE:8B:A1:18:8D:36:63:AF:6F:24:3B Authority key identifier: 82:1A:3F:21:FB:0C:29:4D:6D:4A:52:9B:2F:1D:BD:4B:D1:11:9B:D7 Certificate issuer: /CN=821a3f21fb0c294d6d4a529b2f1dbd4bd1119bd7 Certificate serial: 01A0CDEC948F3AC39580AA0A28F1344C72AB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gho_IfsMKU1tSlKbLx29S9ERm9c.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/edc855-f2bc-4e9c-8c0c-b6f2ac86ef27/1/gho_IfsMKU1tSlKbLx29S9ERm9c.mft Manifest number: 14D1 Signing time: Wed 23 Sep 2026 11:00:28 +0000 Manifest this update: Wed 23 Sep 2026 11:00:28 +0000 Manifest next update: Thu 24 Sep 2026 11:00:28 +0000 Files and hashes: 1: 94DmWvO75aSCrTILT7xO5QfIZ4Q.roa (hash: yowEVWaH5JasWlMxUT7Mgz1/3iSP8rVz/KjlsGeBATs=) 2: I0ycopSi6_q86tsS_2ZsGMaSE7E.roa (hash: X5k67tgIigX44haykK5HKygDUVpwt1sPzwvIgtRhgUo=) 3: Lw_o47E9qYaZtJPZjp5m1M1e0_o.roa (hash: TnHpGib6gDq3lP3ubauOs2iA7D/xB8DKvaZF7GPTkuk=) 4: MRCItQ1B9948OVdVK1kL96AGPQI.roa (hash: ZQgpMxwvj3QAdwytn7kSRtX4MaK4Pcv8MlZ4Lzpi3Pg=) 5: OQ-6VTdp1vw9GrjNLFmvI9JYOrs.roa (hash: ZPmtBIJ2La5bnUm+sApv+AeoWDVjiZhyYSZEHB1jKmo=) 6: OxJM60qRQUOtdqYrv27xs3_kv9k.roa (hash: w3ZIUcbiJQn/X+ANNYduQprQtRgqv43tl64iIBJ+uVs=) 7: PujNlKftYzeQaE0MnZm0EPh4AFY.roa (hash: KOYoiHizuILiOcTb5DR0niku+PQ57DIf210w8rlbdQY=) 8: PyHODj5n0DejAoWrQZBIRXaXo6Y.roa (hash: 3ofBNW8DPxuvHoS9tkTr0YH1zUrrGyXEWYQ/aOGrjNI=) 9: RTPP9X2zvoR_qL8VtqZr6WEHKzw.roa (hash: bz39/MS5H8r1qd18PCFQ3+2kRu1MJoP1Vd1Xyr//BW0=) 10: WGYchnyCAbqQd8pzwZhRwcjvgv8.roa (hash: I9YjzWZ/pqf8yScr+6TqbtawBHd4EYuPwRC5bUBqVQw=) 11: Wz0IiveJRR3iZ_TFadI3Bt6mJJE.roa (hash: CImcnKPxhqg5cF+ps6Yupe+fhV0VE9C6rzuLTV7FS3Q=) 12: X2QsnfxAM9ScjVh_AzAztNDaXJg.roa (hash: L4YEdLYOkjYPPZMBRJDRYkJkVBQq0athDIG3eYPShmM=) 13: Z_IuqEKKfXuEOIP93u24e6BLk0E.roa (hash: 9YG/wmkjQ+naLweN0fWYFNb6KTTbRHlNigN8yWNOBNk=) 14: bjs_zJFuHzjoxK2NthqbKcV1s-8.roa (hash: Eg2O923oFj6n/iosVJD0SXVlsUTZEP0y964Jkw4vJR0=) 15: gho_IfsMKU1tSlKbLx29S9ERm9c.crl (hash: wzzmN8RZhNqC3GazdgnZ0dBAwO4PsflaaNCN6Ne/ayw=) 16: kELckgtwVoSvJeEmqDzRwJ_w8M4.roa (hash: ryrV6l1reh0IiB1vVcw5FXf5SQ2NaFZbF4Pl/NJCuQ4=) 17: u26dzWx1WsuAyPhRE3IG1GMmdJc.roa (hash: gEHPHjFqESUZPon7FHlszrJPYiDLqkhRmgKIOhvsfGY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/edc855-f2bc-4e9c-8c0c-b6f2ac86ef27/1/gho_IfsMKU1tSlKbLx29S9ERm9c.crl rsync://rpki.ripe.net/repository/DEFAULT/12/edc855-f2bc-4e9c-8c0c-b6f2ac86ef27/1/gho_IfsMKU1tSlKbLx29S9ERm9c.mft rsync://rpki.ripe.net/repository/DEFAULT/gho_IfsMKU1tSlKbLx29S9ERm9c.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 24 Sep 2026 08:00:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a0:cd:ec:94:8f:3a:c3:95:80:aa:0a:28:f1:34:4c:72:ab Signature Algorithm: sha256WithRSAEncryption Issuer: CN=821a3f21fb0c294d6d4a529b2f1dbd4bd1119bd7 Validity Not Before: Sep 23 11:00:28 2026 GMT Not After : Sep 24 11:00:28 2026 GMT Subject: CN=6f2f718e05a8f9f92fde8ba1188d3663af6f243b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:47:db:25:71:2e:30:54:80:19:b1:e5:5a:6b: 2d:08:8e:66:a2:e1:02:53:dc:dc:d9:e9:4d:c2:6c: fd:f0:23:62:b8:c8:31:79:0a:82:56:d8:e3:e6:44: 2f:0b:ab:21:96:2d:7c:b7:74:b1:d6:1f:26:7d:e5: 7f:f3:75:19:8b:2c:47:b0:6d:ab:a0:93:14:f3:25: f1:b4:94:24:f9:e9:db:4c:63:b2:7d:32:3f:c2:55: b8:cc:c4:25:29:e8:95:ed:80:4e:f5:2b:2d:c7:2d: 44:f9:e8:fc:60:84:81:ba:f7:02:2a:09:bb:4a:3a: 27:c1:5f:b3:e8:57:68:e6:0f:9e:8c:73:b9:83:58: 20:a6:5e:e7:da:03:05:58:b3:8e:e2:e4:1f:78:8e: 86:9c:2d:9e:0d:d0:69:88:0c:cb:16:4c:bd:a4:cd: 71:0a:91:2a:df:2f:ba:3a:b7:be:a4:60:2a:78:1c: 82:ce:de:c7:f4:3d:46:0b:b3:2f:fb:e7:41:a9:99: 69:0b:a4:6d:b1:65:49:48:c0:44:86:38:8c:fc:4a: 44:16:d7:59:36:03:0e:55:bc:eb:d9:e9:55:60:21: 87:a7:95:47:fa:a3:68:5d:6b:84:53:27:5b:61:b5: cb:09:e7:31:64:3f:d5:e0:56:15:37:bb:d4:74:17: 39:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6F:2F:71:8E:05:A8:F9:F9:2F:DE:8B:A1:18:8D:36:63:AF:6F:24:3B X509v3 Authority Key Identifier: keyid:82:1A:3F:21:FB:0C:29:4D:6D:4A:52:9B:2F:1D:BD:4B:D1:11:9B:D7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gho_IfsMKU1tSlKbLx29S9ERm9c.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/edc855-f2bc-4e9c-8c0c-b6f2ac86ef27/1/gho_IfsMKU1tSlKbLx29S9ERm9c.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/12/edc855-f2bc-4e9c-8c0c-b6f2ac86ef27/1/gho_IfsMKU1tSlKbLx29S9ERm9c.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 07:fd:bf:2c:a2:36:0f:70:3a:86:1b:e1:6d:52:97:a1:ab:88: 45:99:3f:c9:5a:80:e5:09:aa:47:92:ec:d6:45:2f:4f:3d:5b: 99:f5:c4:df:e4:e2:64:a6:44:fa:ea:70:ae:84:4a:0d:11:a2: ec:33:2f:07:db:30:a0:a9:b8:d2:e6:18:01:eb:c2:a2:24:38: e4:6f:a8:fb:dd:86:59:11:7a:a0:c8:17:1c:42:53:cd:6d:10: 95:69:1c:65:a4:a0:7c:2c:6c:d9:cb:ea:8c:c6:c4:1a:87:eb: 78:52:73:4e:14:58:d9:2b:b1:9e:24:02:9c:16:60:21:ff:5d: 71:e6:e7:1e:31:f9:18:be:57:63:c0:67:e8:c2:f6:67:02:c4: e7:08:88:15:07:56:fb:30:a5:43:c1:8d:87:51:1b:62:ce:88: c8:52:84:8a:01:6c:6b:16:99:c3:36:14:70:41:f7:51:8a:2a: 8c:1d:8c:ba:f2:cf:41:22:f2:f2:3b:05:0a:35:00:91:1e:d1: d3:a8:77:54:13:61:a8:b6:0f:62:2e:58:c3:a4:1a:41:ba:df: 86:33:fd:83:d9:61:93:1c:0c:84:c3:35:b7:81:6f:d1:2e:97: d3:fd:61:84:0f:e3:ec:20:aa:47:6a:5c:f9:e3:f1:b4:9a:53: 48:66:35:7c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaDN7JSPOsOVgKoKKPE0THKrMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDgyMWEzZjIxZmIwYzI5NGQ2ZDRhNTI5YjJmMWRiZDRiZDEx MTliZDcwHhcNMjYwOTIzMTEwMDI4WhcNMjYwOTI0MTEwMDI4WjAzMTEwLwYDVQQD Eyg2ZjJmNzE4ZTA1YThmOWY5MmZkZThiYTExODhkMzY2M2FmNmYyNDNiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu0fbJXEuMFSAGbHlWmstCI5mouEC U9zc2elNwmz98CNiuMgxeQqCVtjj5kQvC6shli18t3Sx1h8mfeV/83UZiyxHsG2r oJMU8yXxtJQk+enbTGOyfTI/wlW4zMQlKeiV7YBO9Sstxy1E+ej8YISBuvcCKgm7 SjonwV+z6Fdo5g+ejHO5g1ggpl7n2gMFWLOO4uQfeI6GnC2eDdBpiAzLFky9pM1x CpEq3y+6Ore+pGAqeByCzt7H9D1GC7Mv++dBqZlpC6RtsWVJSMBEhjiM/EpEFtdZ NgMOVbzr2elVYCGHp5VH+qNoXWuEUydbYbXLCecxZD/V4FYVN7vUdBc5BQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFG8vcY4FqPn5L96LoRiNNmOvbyQ7MB8GA1UdIwQY MBaAFIIaPyH7DClNbUpSmy8dvUvREZvXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZ2hvX0lmc01LVTF0U2xLYkx4MjlTOUVSbTljLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMi9lZGM4NTUtZjJiYy00ZTljLThjMGMt YjZmMmFjODZlZjI3LzEvZ2hvX0lmc01LVTF0U2xLYkx4MjlTOUVSbTljLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMi9lZGM4NTUtZjJiYy00ZTljLThjMGMtYjZmMmFjODZlZjI3 LzEvZ2hvX0lmc01LVTF0U2xLYkx4MjlTOUVSbTljLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAB/2/LKI2 D3A6hhvhbVKXoauIRZk/yVqA5QmqR5Ls1kUvTz1bmfXE3+TiZKZE+upwroRKDRGi 7DMvB9swoKm40uYYAevCoiQ45G+o+92GWRF6oMgXHEJTzW0QlWkcZaSgfCxs2cvq jMbEGofreFJzThRY2SuxniQCnBZgIf9dcebnHjH5GL5XY8Bn6ML2ZwLE5wiIFQdW +zClQ8GNh1EbYs6IyFKEigFsaxaZwzYUcEH3UYoqjB2MuvLPQSLy8jsFCjUAkR7R 06h3VBNhqLYPYi5Yw6QaQbrfhjP9g9lhkxwMhMM1t4Fv0S6X0/1hhA/j7CCqR2pc +ePxtJpTSGY1fA== -----END CERTIFICATE-----Generated at Wed Sep 23 13:31:07 2026 by rpki-client