Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/e5c483-44bf-41ad-9e8f-93d0b00e7e04/1/jsla_3i9Id2Om9X0Ud_I-ALvaRY.mft
File: jsla_3i9Id2Om9X0Ud_I-ALvaRY.mft (raw, json)
Hash identifier: 9/lQu3vnbAr7zYztsg1cGUanstXWidCu4TZDhHsTrBY=
Subject key identifier: BF:46:64:91:72:CF:B8:6E:09:5F:AA:24:F1:66:9D:09:13:2F:AE:0F
Authority key identifier: 8E:C9:5A:FF:78:BD:21:DD:8E:9B:D5:F4:51:DF:C8:F8:02:EF:69:16
Certificate issuer: /CN=8ec95aff78bd21dd8e9bd5f451dfc8f802ef6916
Certificate serial: 019CAB33EE8BBF84CDA2875C50573953DB6D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jsla_3i9Id2Om9X0Ud_I-ALvaRY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/e5c483-44bf-41ad-9e8f-93d0b00e7e04/1/jsla_3i9Id2Om9X0Ud_I-ALvaRY.mft
Manifest number: 0E4D
Signing time: Sun 01 Mar 2026 21:00:33 +0000
Manifest this update: Sun 01 Mar 2026 21:00:33 +0000
Manifest next update: Mon 02 Mar 2026 21:00:33 +0000
Files and hashes: 1: dNcSO2D1n9uq3rj5pUSA78mpRA8.roa (hash: rII1EW/12EQZrNsshye1c1W72xQr8Ukcmqzw0ramVd4=)
2: jsla_3i9Id2Om9X0Ud_I-ALvaRY.crl (hash: GEQn2++pGSLKlPb4xNvBMUO3wrt1vJBUkKiuJ/aARQk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/e5c483-44bf-41ad-9e8f-93d0b00e7e04/1/jsla_3i9Id2Om9X0Ud_I-ALvaRY.crl
rsync://rpki.ripe.net/repository/DEFAULT/42/e5c483-44bf-41ad-9e8f-93d0b00e7e04/1/jsla_3i9Id2Om9X0Ud_I-ALvaRY.mft
rsync://rpki.ripe.net/repository/DEFAULT/jsla_3i9Id2Om9X0Ud_I-ALvaRY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:33:ee:8b:bf:84:cd:a2:87:5c:50:57:39:53:db:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8ec95aff78bd21dd8e9bd5f451dfc8f802ef6916
Validity
Not Before: Mar 1 21:00:33 2026 GMT
Not After : Mar 2 21:00:33 2026 GMT
Subject: CN=bf46649172cfb86e095faa24f1669d09132fae0f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:ec:6d:2a:23:10:e1:a3:5d:cd:1d:71:36:4c:
2e:c3:0c:3f:23:76:bf:ce:30:b6:ab:bb:c1:e3:79:
e6:d8:1f:7b:9f:5d:37:a3:15:fa:01:15:f0:90:bb:
d1:09:ef:82:31:f7:fe:a7:bf:da:81:1d:2a:16:2a:
fa:1f:30:a4:ab:91:ff:fd:35:7d:f6:92:24:30:18:
1c:81:38:b9:1c:66:0b:52:8f:b9:5f:9d:85:ce:8a:
43:15:10:96:23:ca:30:01:44:4d:41:7f:7e:63:e1:
e1:40:1b:12:e5:7c:44:46:cb:65:14:e2:e5:31:36:
eb:10:d6:ff:a4:09:b4:f4:9a:32:2c:f0:4e:fc:04:
08:fb:52:af:ff:c1:3e:e0:02:bf:26:fd:92:4e:df:
79:a4:73:5a:4a:a1:a4:12:04:b7:be:8d:7a:53:e0:
4b:8a:f5:14:27:33:10:19:10:ae:24:b1:dd:26:db:
5a:fc:58:bd:5e:77:d3:02:6c:d0:9d:55:8e:c5:03:
c4:db:73:d8:0d:9c:08:17:3a:db:ae:78:e7:96:02:
9e:01:9d:88:cf:43:d2:15:fb:81:ac:5a:6f:73:31:
ca:0f:a2:b6:d3:4b:e2:30:ed:bd:66:b5:ba:16:6c:
28:d2:bf:ec:72:f8:7f:c6:eb:a6:d6:24:b6:6f:b5:
3b:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:46:64:91:72:CF:B8:6E:09:5F:AA:24:F1:66:9D:09:13:2F:AE:0F
X509v3 Authority Key Identifier:
keyid:8E:C9:5A:FF:78:BD:21:DD:8E:9B:D5:F4:51:DF:C8:F8:02:EF:69:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jsla_3i9Id2Om9X0Ud_I-ALvaRY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/e5c483-44bf-41ad-9e8f-93d0b00e7e04/1/jsla_3i9Id2Om9X0Ud_I-ALvaRY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/e5c483-44bf-41ad-9e8f-93d0b00e7e04/1/jsla_3i9Id2Om9X0Ud_I-ALvaRY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:ec:fe:3e:04:31:1d:ea:0f:d2:35:cf:6a:94:83:77:d8:b8:
00:59:f5:12:52:f1:de:ad:2a:06:a8:14:02:d3:1a:71:ca:6d:
f2:4b:69:16:86:87:06:64:c7:e5:c6:5f:c7:ce:a7:ee:63:dc:
48:d0:35:e7:51:b2:9f:af:9b:f4:00:f7:19:42:71:97:a3:d7:
db:5b:e3:ec:ab:87:d0:28:3d:08:8a:3e:f0:ae:c4:e5:4a:e8:
cc:21:8b:83:21:e0:54:15:e5:06:c8:4d:01:e2:35:24:da:54:
0e:be:92:e9:bb:b7:f0:64:ff:a3:33:b7:eb:8e:e5:e3:e3:aa:
af:53:b1:a2:fa:e4:0e:a7:9f:6a:45:fc:64:1d:b9:9b:c1:78:
90:90:3f:8c:a9:6b:26:ac:64:ed:79:4f:82:95:82:0c:6e:fa:
39:a5:75:2c:e8:38:fc:6a:e6:27:bd:ba:4d:9e:78:27:1c:82:
e2:15:ac:a4:40:b1:26:51:0c:9d:17:d0:65:ec:bc:24:da:f0:
d1:40:30:05:b4:2f:50:fe:a8:96:84:04:d7:d0:50:15:a3:e4:
70:2a:50:9f:ee:e4:49:71:6b:e8:7f:2c:98:c8:c9:20:cd:54:
f0:0f:35:ef:7a:43:17:55:f6:2a:d2:9a:3c:4a:d7:ab:a8:04:
ee:40:6f:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:00:00 2026 by rpki-client