Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b3/11db2b-8868-4c43-b0f9-b264858afb19/1/gESlWNFd_DudSn4GZfhtJXzQKgA.mft
File: gESlWNFd_DudSn4GZfhtJXzQKgA.mft (raw, json)
Hash identifier: m8FsUMNsfXqVBfAz/wh2cTQyfnsY378jAHAwXn20rbE=
Subject key identifier: EB:77:69:44:C7:AD:DC:1D:72:2D:06:B5:A0:FE:30:60:FF:69:0C:6D
Authority key identifier: 80:44:A5:58:D1:5D:FC:3B:9D:4A:7E:06:65:F8:6D:25:7C:D0:2A:00
Certificate issuer: /CN=8044a558d15dfc3b9d4a7e0665f86d257cd02a00
Certificate serial: 01A14D9A32A2B8F050E3537DF1F0359B6D3E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gESlWNFd_DudSn4GZfhtJXzQKgA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/11db2b-8868-4c43-b0f9-b264858afb19/1/gESlWNFd_DudSn4GZfhtJXzQKgA.mft
Manifest number: CA
Signing time: Sun 18 Oct 2026 06:01:53 +0000
Manifest this update: Sun 18 Oct 2026 06:01:53 +0000
Manifest next update: Mon 19 Oct 2026 06:01:53 +0000
Files and hashes: 1: GKCt3cmjekjcOKMyEhwefZlY1Rc.roa (hash: kX5yQbk7hXqB67DfOETyQgSWwx15qJbJ3YV1PzD/luE=)
2: GPicX2Mt4yE_Rq_pflq6xcNfgak.roa (hash: WxqHtA7vCCWgN8qQIvP/TGNrMuKDdpeonE+DyVIgdYU=)
3: JdshNWWzWPDoGnEpynR-0_yncmk.roa (hash: 4NdKzjZWez2M4flsHtC7zl6N0sNaTuq1cnyE5IXfYFI=)
4: gESlWNFd_DudSn4GZfhtJXzQKgA.crl (hash: UGOJDQxngg3MhRbe7zuXyqyYvQkWFusS0SO+bq8mtJg=)
5: voT2ZQWnx_qNk8Q73rnGykwMWF0.asa (hash: iR3qSJDhDxakqrHwnJqkfuFb/IgbG88thxvrUJtAz0I=)
6: wYw4IK_-KzyNyRppSgS5ykkfb9E.roa (hash: 6EiFxAzV99YwwMrQ7lvVQuxFjGeaDZgFc75JscpJEx0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/11db2b-8868-4c43-b0f9-b264858afb19/1/gESlWNFd_DudSn4GZfhtJXzQKgA.crl
rsync://rpki.ripe.net/repository/DEFAULT/b3/11db2b-8868-4c43-b0f9-b264858afb19/1/gESlWNFd_DudSn4GZfhtJXzQKgA.mft
rsync://rpki.ripe.net/repository/DEFAULT/gESlWNFd_DudSn4GZfhtJXzQKgA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 19 Oct 2026 05:03:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:4d:9a:32:a2:b8:f0:50:e3:53:7d:f1:f0:35:9b:6d:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8044a558d15dfc3b9d4a7e0665f86d257cd02a00
Validity
Not Before: Oct 18 06:01:53 2026 GMT
Not After : Oct 19 06:01:53 2026 GMT
Subject: CN=eb776944c7addc1d722d06b5a0fe3060ff690c6d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:f3:f1:5b:f9:04:aa:05:90:bb:e9:52:5a:97:
b7:c8:38:0e:50:b6:6c:f5:e9:93:7c:23:61:9a:cf:
ae:bb:88:cf:68:3a:78:46:3a:50:0d:49:f7:5a:d6:
e9:e5:98:f6:34:12:ec:5f:65:88:e5:78:23:53:4d:
71:68:0b:a8:ad:3d:3c:61:7e:ec:d1:b2:0c:5a:05:
f6:50:7c:20:31:9b:26:7c:9c:d8:b9:51:85:17:06:
31:23:25:1a:76:92:03:ae:fb:1e:93:88:1e:4a:e2:
0d:26:7a:4e:71:3e:15:50:c8:5a:af:86:3a:a0:9e:
85:31:be:49:0c:dd:b2:a6:d5:f7:e9:02:fa:d5:88:
c6:2b:09:9e:70:0c:9a:fa:08:f9:17:0a:0f:75:70:
25:e2:98:33:06:08:94:ba:11:75:1d:15:5f:a8:5b:
fb:b5:c7:41:59:84:53:fc:57:c4:55:e5:9e:68:34:
95:a4:f2:41:05:f7:33:7c:e4:78:59:da:d7:99:0b:
59:ea:e9:50:6f:6b:4f:72:37:ed:f2:92:15:aa:5d:
26:d0:a5:14:3c:89:f3:8b:de:dd:3e:03:70:e0:f3:
7e:5e:fd:d6:f1:41:26:d9:26:21:2a:2f:a9:1f:be:
91:6b:e1:87:75:1c:91:31:5a:98:b3:37:ef:35:af:
43:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:77:69:44:C7:AD:DC:1D:72:2D:06:B5:A0:FE:30:60:FF:69:0C:6D
X509v3 Authority Key Identifier:
keyid:80:44:A5:58:D1:5D:FC:3B:9D:4A:7E:06:65:F8:6D:25:7C:D0:2A:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gESlWNFd_DudSn4GZfhtJXzQKgA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/11db2b-8868-4c43-b0f9-b264858afb19/1/gESlWNFd_DudSn4GZfhtJXzQKgA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/11db2b-8868-4c43-b0f9-b264858afb19/1/gESlWNFd_DudSn4GZfhtJXzQKgA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:8f:b8:27:40:c8:7a:5b:56:d1:13:b4:ea:4b:84:70:62:c7:
c2:db:5e:ac:03:2e:9c:01:73:6c:6a:cb:cc:89:7b:0d:4f:8c:
64:13:ad:7a:e3:66:45:8a:8f:13:55:ee:f8:21:bf:dd:64:33:
42:b5:12:80:6a:17:75:c1:d0:2c:7f:d8:7c:ad:50:0e:e9:91:
0a:3f:fa:7a:c4:8c:d7:84:07:71:c7:00:22:4e:1e:49:64:01:
9e:32:d6:fa:57:94:38:0c:d4:04:a7:df:b8:a1:1b:69:b0:15:
b4:3f:6e:25:63:2f:76:54:e5:c6:3f:d4:d2:56:7f:75:26:c6:
bc:80:31:86:f3:98:f0:bf:b3:9d:23:81:ef:7d:9b:e9:6f:e9:
51:74:2b:7d:e5:70:99:34:3e:9f:07:f9:0e:e6:eb:b4:dd:5e:
95:23:bc:bb:e0:1a:4d:f0:73:33:ff:21:1e:d0:4f:84:2c:ac:
78:98:e0:bf:76:cf:c5:ca:3f:79:76:97:cb:91:2e:0b:13:a9:
91:18:80:e9:9d:d1:08:c6:59:1f:ba:b1:34:89:2b:10:c3:8c:
9f:93:81:d0:24:51:b6:33:e9:12:00:84:dc:ce:5f:d9:ff:2f:
32:d3:25:3c:25:dd:78:40:42:8f:21:e1:1b:2c:27:3a:08:a8:
1a:99:81:83
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaFNmjKiuPBQ41N98fA1m20+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgwNDRhNTU4ZDE1ZGZjM2I5ZDRhN2UwNjY1Zjg2ZDI1N2Nk
MDJhMDAwHhcNMjYxMDE4MDYwMTUzWhcNMjYxMDE5MDYwMTUzWjAzMTEwLwYDVQQD
EyhlYjc3Njk0NGM3YWRkYzFkNzIyZDA2YjVhMGZlMzA2MGZmNjkwYzZkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt/PxW/kEqgWQu+lSWpe3yDgOULZs
9emTfCNhms+uu4jPaDp4RjpQDUn3Wtbp5Zj2NBLsX2WI5XgjU01xaAuorT08YX7s
0bIMWgX2UHwgMZsmfJzYuVGFFwYxIyUadpIDrvsek4geSuINJnpOcT4VUMhar4Y6
oJ6FMb5JDN2yptX36QL61YjGKwmecAya+gj5FwoPdXAl4pgzBgiUuhF1HRVfqFv7
tcdBWYRT/FfEVeWeaDSVpPJBBfczfOR4WdrXmQtZ6ulQb2tPcjft8pIVql0m0KUU
PInzi97dPgNw4PN+Xv3W8UEm2SYhKi+pH76Ra+GHdRyRMVqYszfvNa9DqwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOt3aUTHrdwdci0GtaD+MGD/aQxtMB8GA1UdIwQY
MBaAFIBEpVjRXfw7nUp+BmX4bSV80CoAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZ0VTbFdORmRfRHVkU240R1pmaHRKWHpRS2dBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMy8xMWRiMmItODg2OC00YzQzLWIwZjkt
YjI2NDg1OGFmYjE5LzEvZ0VTbFdORmRfRHVkU240R1pmaHRKWHpRS2dBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMy8xMWRiMmItODg2OC00YzQzLWIwZjktYjI2NDg1OGFmYjE5
LzEvZ0VTbFdORmRfRHVkU240R1pmaHRKWHpRS2dBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfI+4J0DI
eltW0RO06kuEcGLHwtterAMunAFzbGrLzIl7DU+MZBOteuNmRYqPE1Xu+CG/3WQz
QrUSgGoXdcHQLH/YfK1QDumRCj/6esSM14QHcccAIk4eSWQBnjLW+leUOAzUBKff
uKEbabAVtD9uJWMvdlTlxj/U0lZ/dSbGvIAxhvOY8L+znSOB732b6W/pUXQrfeVw
mTQ+nwf5DubrtN1elSO8u+AaTfBzM/8hHtBPhCyseJjgv3bPxco/eXaXy5EuCxOp
kRiA6Z3RCMZZH7qxNIkrEMOMn5OB0CRRtjPpEgCE3M5f2f8vMtMlPCXdeEBCjyHh
GywnOgioGpmBgw==
-----END CERTIFICATE-----
Generated at Sun Oct 18 15:43:40 2026 by rpki-client