Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/e5c483-44bf-41ad-9e8f-93d0b00e7e04/1/jsla_3i9Id2Om9X0Ud_I-ALvaRY.mft
File: jsla_3i9Id2Om9X0Ud_I-ALvaRY.mft (raw, json)
Hash identifier: nHYPzoBEtK8lL3uy21JNpaMt73A52sTUNXIPueoYvts=
Subject key identifier: B4:5D:F9:42:CF:AB:E6:46:A8:38:D0:99:D3:E1:DF:B5:0D:EB:DA:AE
Authority key identifier: 8E:C9:5A:FF:78:BD:21:DD:8E:9B:D5:F4:51:DF:C8:F8:02:EF:69:16
Certificate issuer: /CN=8ec95aff78bd21dd8e9bd5f451dfc8f802ef6916
Certificate serial: 019D26CD62A64066BA303A4A99EA4F7CBCE1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jsla_3i9Id2Om9X0Ud_I-ALvaRY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/e5c483-44bf-41ad-9e8f-93d0b00e7e04/1/jsla_3i9Id2Om9X0Ud_I-ALvaRY.mft
Manifest number: 0E8D
Signing time: Wed 25 Mar 2026 21:01:27 +0000
Manifest this update: Wed 25 Mar 2026 21:01:27 +0000
Manifest next update: Thu 26 Mar 2026 21:01:27 +0000
Files and hashes: 1: dNcSO2D1n9uq3rj5pUSA78mpRA8.roa (hash: rII1EW/12EQZrNsshye1c1W72xQr8Ukcmqzw0ramVd4=)
2: jsla_3i9Id2Om9X0Ud_I-ALvaRY.crl (hash: kPnEttpLQdVgduae866p4O8N3mHrJffDZFHK3iMVQLI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/e5c483-44bf-41ad-9e8f-93d0b00e7e04/1/jsla_3i9Id2Om9X0Ud_I-ALvaRY.crl
rsync://rpki.ripe.net/repository/DEFAULT/42/e5c483-44bf-41ad-9e8f-93d0b00e7e04/1/jsla_3i9Id2Om9X0Ud_I-ALvaRY.mft
rsync://rpki.ripe.net/repository/DEFAULT/jsla_3i9Id2Om9X0Ud_I-ALvaRY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:cd:62:a6:40:66:ba:30:3a:4a:99:ea:4f:7c:bc:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8ec95aff78bd21dd8e9bd5f451dfc8f802ef6916
Validity
Not Before: Mar 25 21:01:27 2026 GMT
Not After : Mar 26 21:01:27 2026 GMT
Subject: CN=b45df942cfabe646a838d099d3e1dfb50debdaae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:8e:1d:d5:9b:73:17:74:3a:e1:e4:12:d8:a2:
c0:51:11:59:20:91:70:62:9f:90:1a:3b:b6:a7:ff:
54:9a:9d:4b:90:a3:a8:f2:6d:c5:64:55:bb:02:9e:
71:b0:7d:0d:94:db:be:17:c5:fe:40:2b:a1:ad:17:
6f:d7:d5:69:c5:1d:46:ac:b8:e6:fd:a7:61:f1:35:
d4:06:40:89:20:df:96:6a:d9:be:96:a3:c6:59:3a:
7e:9c:57:f6:51:4b:fe:48:c9:82:e9:60:5c:b2:ed:
d8:d8:c4:91:4d:c8:d5:34:42:b3:00:3b:11:7d:6d:
cf:48:1d:1b:ac:a8:be:de:de:cb:ef:5f:f6:7c:88:
22:cc:a9:40:43:10:5b:0b:57:93:75:2d:05:ae:4b:
ac:6e:19:22:97:05:2a:8a:c4:03:d1:85:27:02:6c:
45:ae:53:9d:fa:67:3c:a4:c6:94:38:c1:94:b0:1d:
48:90:47:be:eb:1a:20:9f:a7:3f:4c:9c:ba:8a:36:
79:d6:37:98:41:4d:0a:6d:97:11:1a:d5:1c:74:db:
7a:c3:41:81:6d:39:aa:72:77:b0:b3:c9:df:31:5c:
bd:e4:1d:8e:9d:bb:ab:ac:aa:6a:90:06:ed:fd:26:
b5:cf:a0:c1:91:b4:24:21:59:d1:19:cd:28:12:53:
ef:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:5D:F9:42:CF:AB:E6:46:A8:38:D0:99:D3:E1:DF:B5:0D:EB:DA:AE
X509v3 Authority Key Identifier:
keyid:8E:C9:5A:FF:78:BD:21:DD:8E:9B:D5:F4:51:DF:C8:F8:02:EF:69:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jsla_3i9Id2Om9X0Ud_I-ALvaRY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/e5c483-44bf-41ad-9e8f-93d0b00e7e04/1/jsla_3i9Id2Om9X0Ud_I-ALvaRY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/e5c483-44bf-41ad-9e8f-93d0b00e7e04/1/jsla_3i9Id2Om9X0Ud_I-ALvaRY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:56:fa:95:c8:09:4f:45:3f:b2:67:64:80:ed:03:87:97:d9:
9f:7f:54:d8:c1:d5:b2:eb:3f:3d:c9:0c:3d:15:57:8a:e9:72:
eb:a1:06:ae:75:3a:02:15:93:38:a8:8c:38:65:a7:4a:7c:f5:
3d:92:e5:31:12:a2:f3:ad:44:64:f0:65:f7:ea:e4:54:d4:82:
cd:09:d1:c8:6a:b1:7e:ba:67:ec:e9:0b:30:ff:36:c8:f2:df:
da:97:54:be:69:09:8e:dd:9a:64:35:76:9b:67:9a:6b:24:6a:
f7:f6:f5:87:9e:ff:aa:3d:83:fe:06:74:9d:e1:cc:8d:33:41:
a8:b9:4f:d7:3d:f5:e3:16:37:b7:76:6d:53:62:94:69:21:da:
bd:83:cc:a4:f2:61:7b:85:98:3e:55:a7:bc:49:90:30:fd:91:
c1:89:fd:23:87:6d:88:14:eb:16:06:33:82:79:5a:46:f3:0a:
1a:d4:b3:e1:ab:a7:95:c2:6d:5a:b1:0b:f9:51:c3:98:f7:50:
fc:fc:cf:e4:e6:28:15:a9:3d:7f:ae:ac:09:1f:91:85:e6:f7:
b2:04:3d:9b:f1:38:12:3f:b9:0b:50:b0:12:7a:b2:a5:9f:c7:
9b:cb:a5:8f:9d:1e:8d:3c:09:a3:c4:61:2f:d5:90:7b:b2:69:
b9:1e:29:6a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0mzWKmQGa6MDpKmepPfLzhMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhlYzk1YWZmNzhiZDIxZGQ4ZTliZDVmNDUxZGZjOGY4MDJl
ZjY5MTYwHhcNMjYwMzI1MjEwMTI3WhcNMjYwMzI2MjEwMTI3WjAzMTEwLwYDVQQD
EyhiNDVkZjk0MmNmYWJlNjQ2YTgzOGQwOTlkM2UxZGZiNTBkZWJkYWFlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxI4d1ZtzF3Q64eQS2KLAURFZIJFw
Yp+QGju2p/9Ump1LkKOo8m3FZFW7Ap5xsH0NlNu+F8X+QCuhrRdv19VpxR1GrLjm
/adh8TXUBkCJIN+Watm+lqPGWTp+nFf2UUv+SMmC6WBcsu3Y2MSRTcjVNEKzADsR
fW3PSB0brKi+3t7L71/2fIgizKlAQxBbC1eTdS0FrkusbhkilwUqisQD0YUnAmxF
rlOd+mc8pMaUOMGUsB1IkEe+6xogn6c/TJy6ijZ51jeYQU0KbZcRGtUcdNt6w0GB
bTmqcnews8nfMVy95B2OnburrKpqkAbt/Sa1z6DBkbQkIVnRGc0oElPv/wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLRd+ULPq+ZGqDjQmdPh37UN69quMB8GA1UdIwQY
MBaAFI7JWv94vSHdjpvV9FHfyPgC72kWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvanNsYV8zaTlJZDJPbTlYMFVkX0ktQUx2YVJZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Mi9lNWM0ODMtNDRiZi00MWFkLTllOGYt
OTNkMGIwMGU3ZTA0LzEvanNsYV8zaTlJZDJPbTlYMFVkX0ktQUx2YVJZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Mi9lNWM0ODMtNDRiZi00MWFkLTllOGYtOTNkMGIwMGU3ZTA0
LzEvanNsYV8zaTlJZDJPbTlYMFVkX0ktQUx2YVJZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVVb6lcgJ
T0U/smdkgO0Dh5fZn39U2MHVsus/PckMPRVXiuly66EGrnU6AhWTOKiMOGWnSnz1
PZLlMRKi861EZPBl9+rkVNSCzQnRyGqxfrpn7OkLMP82yPLf2pdUvmkJjt2aZDV2
m2eaayRq9/b1h57/qj2D/gZ0neHMjTNBqLlP1z314xY3t3ZtU2KUaSHavYPMpPJh
e4WYPlWnvEmQMP2RwYn9I4dtiBTrFgYzgnlaRvMKGtSz4aunlcJtWrEL+VHDmPdQ
/PzP5OYoFak9f66sCR+Rheb3sgQ9m/E4Ej+5C1CwEnqypZ/Hm8ulj50ejTwJo8Rh
L9WQe7JpuR4pag==
-----END CERTIFICATE-----
Generated at Thu Mar 26 02:06:26 2026 by rpki-client