$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/12/edc855-f2bc-4e9c-8c0c-b6f2ac86ef27/1/gho_IfsMKU1tSlKbLx29S9ERm9c.mft File: gho_IfsMKU1tSlKbLx29S9ERm9c.mft (raw, json) Hash identifier: yqns8j4b8oJrACVu+/68Bc0LyW6ynlz4RbUjzjANtrU= Subject key identifier: 07:0C:F8:DB:32:34:A6:A1:21:90:2B:E9:C9:46:BB:7C:24:C1:16:96 Authority key identifier: 82:1A:3F:21:FB:0C:29:4D:6D:4A:52:9B:2F:1D:BD:4B:D1:11:9B:D7 Certificate issuer: /CN=821a3f21fb0c294d6d4a529b2f1dbd4bd1119bd7 Certificate serial: 01A0C06836B2BE242B433F4CE1E9892F3FE1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gho_IfsMKU1tSlKbLx29S9ERm9c.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/edc855-f2bc-4e9c-8c0c-b6f2ac86ef27/1/gho_IfsMKU1tSlKbLx29S9ERm9c.mft Manifest number: 14CA Signing time: Sun 20 Sep 2026 20:00:50 +0000 Manifest this update: Sun 20 Sep 2026 20:00:50 +0000 Manifest next update: Mon 21 Sep 2026 20:00:50 +0000 Files and hashes: 1: 94DmWvO75aSCrTILT7xO5QfIZ4Q.roa (hash: yowEVWaH5JasWlMxUT7Mgz1/3iSP8rVz/KjlsGeBATs=) 2: I0ycopSi6_q86tsS_2ZsGMaSE7E.roa (hash: X5k67tgIigX44haykK5HKygDUVpwt1sPzwvIgtRhgUo=) 3: Lw_o47E9qYaZtJPZjp5m1M1e0_o.roa (hash: TnHpGib6gDq3lP3ubauOs2iA7D/xB8DKvaZF7GPTkuk=) 4: MRCItQ1B9948OVdVK1kL96AGPQI.roa (hash: ZQgpMxwvj3QAdwytn7kSRtX4MaK4Pcv8MlZ4Lzpi3Pg=) 5: OQ-6VTdp1vw9GrjNLFmvI9JYOrs.roa (hash: ZPmtBIJ2La5bnUm+sApv+AeoWDVjiZhyYSZEHB1jKmo=) 6: OxJM60qRQUOtdqYrv27xs3_kv9k.roa (hash: w3ZIUcbiJQn/X+ANNYduQprQtRgqv43tl64iIBJ+uVs=) 7: PujNlKftYzeQaE0MnZm0EPh4AFY.roa (hash: KOYoiHizuILiOcTb5DR0niku+PQ57DIf210w8rlbdQY=) 8: PyHODj5n0DejAoWrQZBIRXaXo6Y.roa (hash: 3ofBNW8DPxuvHoS9tkTr0YH1zUrrGyXEWYQ/aOGrjNI=) 9: RTPP9X2zvoR_qL8VtqZr6WEHKzw.roa (hash: bz39/MS5H8r1qd18PCFQ3+2kRu1MJoP1Vd1Xyr//BW0=) 10: WGYchnyCAbqQd8pzwZhRwcjvgv8.roa (hash: I9YjzWZ/pqf8yScr+6TqbtawBHd4EYuPwRC5bUBqVQw=) 11: Wz0IiveJRR3iZ_TFadI3Bt6mJJE.roa (hash: CImcnKPxhqg5cF+ps6Yupe+fhV0VE9C6rzuLTV7FS3Q=) 12: X2QsnfxAM9ScjVh_AzAztNDaXJg.roa (hash: L4YEdLYOkjYPPZMBRJDRYkJkVBQq0athDIG3eYPShmM=) 13: Z_IuqEKKfXuEOIP93u24e6BLk0E.roa (hash: 9YG/wmkjQ+naLweN0fWYFNb6KTTbRHlNigN8yWNOBNk=) 14: bjs_zJFuHzjoxK2NthqbKcV1s-8.roa (hash: Eg2O923oFj6n/iosVJD0SXVlsUTZEP0y964Jkw4vJR0=) 15: gho_IfsMKU1tSlKbLx29S9ERm9c.crl (hash: WVPEZ2eg9HyKyZJIpMYbnnjM9f+dMf9EF7bzOYMiqHE=) 16: kELckgtwVoSvJeEmqDzRwJ_w8M4.roa (hash: ryrV6l1reh0IiB1vVcw5FXf5SQ2NaFZbF4Pl/NJCuQ4=) 17: u26dzWx1WsuAyPhRE3IG1GMmdJc.roa (hash: gEHPHjFqESUZPon7FHlszrJPYiDLqkhRmgKIOhvsfGY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/edc855-f2bc-4e9c-8c0c-b6f2ac86ef27/1/gho_IfsMKU1tSlKbLx29S9ERm9c.crl rsync://rpki.ripe.net/repository/DEFAULT/12/edc855-f2bc-4e9c-8c0c-b6f2ac86ef27/1/gho_IfsMKU1tSlKbLx29S9ERm9c.mft rsync://rpki.ripe.net/repository/DEFAULT/gho_IfsMKU1tSlKbLx29S9ERm9c.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 21 Sep 2026 20:00:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a0:c0:68:36:b2:be:24:2b:43:3f:4c:e1:e9:89:2f:3f:e1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=821a3f21fb0c294d6d4a529b2f1dbd4bd1119bd7 Validity Not Before: Sep 20 20:00:50 2026 GMT Not After : Sep 21 20:00:50 2026 GMT Subject: CN=070cf8db3234a6a121902be9c946bb7c24c11696 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:7a:42:09:84:4c:07:4b:bd:f2:ac:57:97:9e: 11:66:3c:db:eb:30:d4:19:c7:89:70:07:78:84:2c: cd:b4:a7:93:6d:07:0b:e7:c9:64:f4:d5:12:0a:54: c5:83:c1:93:bb:3a:15:5c:8c:fc:e5:bf:1b:09:6d: 62:29:86:e1:48:1a:81:b4:2c:c6:ee:c7:6a:36:d3: ea:66:2e:db:6a:cd:38:a7:fd:9f:28:08:7e:62:ea: a3:a9:3d:73:c5:b1:57:f3:60:c3:7e:0a:2b:23:ca: ee:e7:72:1d:59:8e:36:2a:81:c7:20:c9:44:9f:f6: 69:d7:65:b8:0f:8d:23:1b:0c:2a:78:05:33:66:0e: ff:17:e1:2c:36:75:e2:57:6d:b5:5e:97:0d:7e:c6: 6b:b0:ef:40:59:af:9c:d9:97:cb:ed:60:e2:a5:b1: 3d:0c:44:29:54:60:20:d8:dc:f4:7a:b1:1c:47:03: 08:68:9b:12:59:1a:18:43:c0:af:a1:82:f4:ef:6f: 37:18:c1:ed:d9:01:96:d8:53:79:e1:e8:f4:5a:f6: 54:e0:7e:e4:05:4f:ac:c7:ea:c7:6d:36:7a:7f:84: 0f:ca:bb:a4:8e:7c:d4:52:f6:75:c7:0d:08:26:95: cb:8b:a2:32:05:6d:67:14:bb:08:7a:92:16:93:3f: 9f:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:0C:F8:DB:32:34:A6:A1:21:90:2B:E9:C9:46:BB:7C:24:C1:16:96 X509v3 Authority Key Identifier: keyid:82:1A:3F:21:FB:0C:29:4D:6D:4A:52:9B:2F:1D:BD:4B:D1:11:9B:D7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gho_IfsMKU1tSlKbLx29S9ERm9c.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/edc855-f2bc-4e9c-8c0c-b6f2ac86ef27/1/gho_IfsMKU1tSlKbLx29S9ERm9c.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/12/edc855-f2bc-4e9c-8c0c-b6f2ac86ef27/1/gho_IfsMKU1tSlKbLx29S9ERm9c.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ad:b2:ad:6c:28:27:e9:c6:df:96:ec:0d:97:27:eb:b6:26:4a: 41:3f:3d:83:45:21:a7:45:2c:85:a3:2a:a5:4b:0b:3c:4d:1d: 67:dc:9b:1b:90:25:68:e7:77:60:e1:1a:73:04:2c:7a:e6:36: 67:06:b3:ff:ed:c0:22:7e:82:48:5e:28:1c:97:e8:d6:7c:47: 8a:ec:9a:8f:92:1b:15:47:9a:95:5e:92:06:14:df:eb:4e:9c: bc:01:c9:68:85:ff:08:df:bd:82:18:6f:06:02:f8:00:ee:61: 8c:54:63:c4:d2:bc:bb:88:65:8c:98:89:da:cd:4e:4e:b9:2a: 35:dd:42:98:c1:81:78:ec:c0:b8:e5:a6:66:7b:f2:82:95:bd: 0a:38:94:55:78:a0:0d:63:27:48:39:d1:74:d5:2e:96:77:99: 73:ec:bc:b7:d6:49:7a:3f:b5:b9:40:06:42:9a:f6:6f:d5:91: 81:14:90:8c:e4:78:e2:a3:65:ca:4b:41:4f:66:df:38:2a:8a: 5f:76:90:9f:a9:f1:56:16:52:b4:49:68:27:60:85:28:0e:7d: c3:b6:4c:35:5b:80:75:d1:85:63:45:cb:db:d9:8b:bd:4b:24: 96:17:64:cf:0c:c7:e9:f7:fe:ce:11:c5:68:94:2d:0c:2c:f3: f5:b0:40:d8 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaDAaDayviQrQz9M4emJLz/hMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDgyMWEzZjIxZmIwYzI5NGQ2ZDRhNTI5YjJmMWRiZDRiZDEx MTliZDcwHhcNMjYwOTIwMjAwMDUwWhcNMjYwOTIxMjAwMDUwWjAzMTEwLwYDVQQD EygwNzBjZjhkYjMyMzRhNmExMjE5MDJiZTljOTQ2YmI3YzI0YzExNjk2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlHpCCYRMB0u98qxXl54RZjzb6zDU GceJcAd4hCzNtKeTbQcL58lk9NUSClTFg8GTuzoVXIz85b8bCW1iKYbhSBqBtCzG 7sdqNtPqZi7bas04p/2fKAh+YuqjqT1zxbFX82DDfgorI8ru53IdWY42KoHHIMlE n/Zp12W4D40jGwwqeAUzZg7/F+EsNnXiV221XpcNfsZrsO9AWa+c2ZfL7WDipbE9 DEQpVGAg2Nz0erEcRwMIaJsSWRoYQ8CvoYL07283GMHt2QGW2FN54ej0WvZU4H7k BU+sx+rHbTZ6f4QPyrukjnzUUvZ1xw0IJpXLi6IyBW1nFLsIepIWkz+fEwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAcM+NsyNKahIZAr6clGu3wkwRaWMB8GA1UdIwQY MBaAFIIaPyH7DClNbUpSmy8dvUvREZvXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZ2hvX0lmc01LVTF0U2xLYkx4MjlTOUVSbTljLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMi9lZGM4NTUtZjJiYy00ZTljLThjMGMt YjZmMmFjODZlZjI3LzEvZ2hvX0lmc01LVTF0U2xLYkx4MjlTOUVSbTljLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMi9lZGM4NTUtZjJiYy00ZTljLThjMGMtYjZmMmFjODZlZjI3 LzEvZ2hvX0lmc01LVTF0U2xLYkx4MjlTOUVSbTljLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEArbKtbCgn 6cbfluwNlyfrtiZKQT89g0Uhp0UshaMqpUsLPE0dZ9ybG5AlaOd3YOEacwQseuY2 Zwaz/+3AIn6CSF4oHJfo1nxHiuyaj5IbFUealV6SBhTf606cvAHJaIX/CN+9ghhv BgL4AO5hjFRjxNK8u4hljJiJ2s1OTrkqNd1CmMGBeOzAuOWmZnvygpW9CjiUVXig DWMnSDnRdNUulneZc+y8t9ZJej+1uUAGQpr2b9WRgRSQjOR44qNlyktBT2bfOCqK X3aQn6nxVhZStEloJ2CFKA59w7ZMNVuAddGFY0XL29mLvUsklhdkzwzH6ff+zhHF aJQtDCzz9bBA2A== -----END CERTIFICATE-----Generated at Mon Sep 21 04:16:47 2026 by rpki-client