Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/afef12-1f08-4b46-947b-ca0c62621098/1/alf_6CKzunvBlNt6c0yF787y8oM.mft
File: alf_6CKzunvBlNt6c0yF787y8oM.mft (raw, json)
Hash identifier: 33H+wVrIC8wxV36sbqSczW5eWg1OtcFxaiHnTQ1vgEQ=
Subject key identifier: 0F:75:0C:79:A1:C9:46:FA:1B:5F:A8:98:7F:C5:69:C3:DF:FD:09:0F
Authority key identifier: 6A:57:FF:E8:22:B3:BA:7B:C1:94:DB:7A:73:4C:85:EF:CE:F2:F2:83
Certificate issuer: /CN=6a57ffe822b3ba7bc194db7a734c85efcef2f283
Certificate serial: 019CAD598561225841820FE820AE2AF85E81
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/alf_6CKzunvBlNt6c0yF787y8oM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/afef12-1f08-4b46-947b-ca0c62621098/1/alf_6CKzunvBlNt6c0yF787y8oM.mft
Manifest number: 1850
Signing time: Mon 02 Mar 2026 07:00:51 +0000
Manifest this update: Mon 02 Mar 2026 07:00:51 +0000
Manifest next update: Tue 03 Mar 2026 07:00:51 +0000
Files and hashes: 1: 0yjFYiyH8c4Kvnnuzk3XUQWka3U.roa (hash: 8CbnBqCqNuJJeCjiCl9MVRUgtudEnYSxf9iLux5cWW4=)
2: 4Bg7xc4c3gn14eqw3Q_EY2wsLCg.roa (hash: V0r6f18ufhArHZVCr3p5V92fQa1xW01Er8GrT60C2Ak=)
3: 96omvjV6JYdBPZlIVSnCjfm_nWI.asa (hash: 76/x4HVgX0yY3hTYmk0/wth2ENsRf9PyXfMTDy9C3Mw=)
4: UX2lEHFutG5L20cEw2lc-BnrLSE.roa (hash: 94KIEY+pprKz6jYEWQg5ZDOei3RFyR0/YDvRw2h7/6Q=)
5: alf_6CKzunvBlNt6c0yF787y8oM.crl (hash: BQxOZ8fZrpQkKw7PPfpWHuPZnLnb/GX0VA+OE4dh4gA=)
6: ee2lwyUuV88L7AjFoomEL9zBWVQ.asa (hash: VmHb/cOnUojnpsLZeINNi+NRCyYc9GZTiZBd+RtvTOg=)
7: jQpb433w3EOWB9aXUd_c_slO2l8.asa (hash: /i2kLyt0tP8dxCxVXb11RPbdCXXg7GHwLDlUBgeEQ7U=)
8: vupopEfOooQGRIzGGFSHPCS81rI.roa (hash: Xeyp95EPsi/om1AKe7B6gcZG7WAjEg0hK0PFbzgsjRw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/afef12-1f08-4b46-947b-ca0c62621098/1/alf_6CKzunvBlNt6c0yF787y8oM.crl
rsync://rpki.ripe.net/repository/DEFAULT/ab/afef12-1f08-4b46-947b-ca0c62621098/1/alf_6CKzunvBlNt6c0yF787y8oM.mft
rsync://rpki.ripe.net/repository/DEFAULT/alf_6CKzunvBlNt6c0yF787y8oM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 07:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:59:85:61:22:58:41:82:0f:e8:20:ae:2a:f8:5e:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6a57ffe822b3ba7bc194db7a734c85efcef2f283
Validity
Not Before: Mar 2 07:00:51 2026 GMT
Not After : Mar 3 07:00:51 2026 GMT
Subject: CN=0f750c79a1c946fa1b5fa8987fc569c3dffd090f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:0d:06:8f:ef:1d:54:4b:63:e8:e3:f4:36:9a:
a9:54:de:55:47:62:94:0e:4c:c3:5a:2b:3b:e6:5a:
84:ef:00:8a:4f:3c:7e:99:17:4b:82:54:5e:bf:b8:
ef:4f:c1:81:83:3a:c0:7d:ee:6b:55:0f:87:13:47:
10:03:90:28:60:f5:ac:2b:37:78:13:fd:4f:f7:c9:
36:01:57:c8:c9:25:63:6e:63:4e:6c:af:2b:05:70:
59:23:0c:22:6f:64:ba:ac:39:14:78:a6:41:c1:2a:
49:e3:62:db:54:d5:91:07:c3:19:bc:12:7f:6c:29:
99:da:05:38:55:f2:a4:bd:d7:41:81:05:07:b8:c0:
5e:d7:e9:1c:6b:26:7b:f0:52:15:bb:d7:74:08:df:
e5:3d:ef:bf:20:8c:63:f2:66:c7:9e:0f:59:27:34:
9c:91:86:80:4d:8f:f5:ec:58:3a:b0:e4:16:e7:02:
a4:7b:cf:95:87:3c:28:2a:3f:4a:56:22:cf:2d:80:
6b:ab:a1:29:b0:6b:4b:a2:11:0c:fe:7a:12:4d:c6:
56:62:91:b0:7b:ea:a8:b2:af:7c:bc:bf:bb:b1:ad:
a1:ef:96:06:c9:a3:0f:25:5f:41:59:5b:ec:ff:dd:
be:8a:48:c0:73:08:56:b9:f8:5b:8f:34:16:9c:3b:
68:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:75:0C:79:A1:C9:46:FA:1B:5F:A8:98:7F:C5:69:C3:DF:FD:09:0F
X509v3 Authority Key Identifier:
keyid:6A:57:FF:E8:22:B3:BA:7B:C1:94:DB:7A:73:4C:85:EF:CE:F2:F2:83
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/alf_6CKzunvBlNt6c0yF787y8oM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/afef12-1f08-4b46-947b-ca0c62621098/1/alf_6CKzunvBlNt6c0yF787y8oM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/afef12-1f08-4b46-947b-ca0c62621098/1/alf_6CKzunvBlNt6c0yF787y8oM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:23:aa:dc:75:1f:8e:b5:9b:e1:64:28:78:dd:b0:90:db:91:
2e:67:80:33:a8:72:0d:5f:31:52:f4:85:1b:9c:2c:57:c1:7b:
11:a1:f9:91:c7:96:65:ac:3a:0c:ba:80:45:c7:e4:d5:9a:37:
21:06:27:01:d8:01:5b:df:fe:c7:87:4e:bb:76:90:00:90:ea:
2d:70:bf:89:cb:87:82:3e:d0:90:27:69:2b:1d:26:fe:88:e5:
86:51:5a:88:d9:7c:e1:95:29:cd:8e:92:b7:58:ca:df:ff:63:
3a:b5:15:a9:75:a9:b4:01:93:47:f1:82:45:0c:ab:f8:97:7a:
c7:61:bf:96:d0:c6:f4:2a:a9:cf:af:73:6f:88:44:9b:2d:48:
62:b9:1c:a4:80:8d:64:b4:dd:fc:af:f7:ac:2b:74:f5:41:01:
b6:ee:42:50:44:33:45:c8:cb:54:b1:34:30:df:8b:a5:76:d3:
ea:7e:2e:c8:94:81:6e:bf:7c:b2:c0:db:10:07:29:e4:81:4f:
ed:d3:12:fa:93:a6:8f:a8:36:eb:cf:ac:8d:10:e3:0d:30:ad:
0a:d7:1f:6d:b1:df:59:a1:b2:a2:1f:74:de:d9:24:04:00:d8:
56:64:5a:bb:41:b0:8e:b7:58:63:49:95:b0:be:29:1a:b0:35:
4e:e6:a9:8b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZytWYVhIlhBgg/oIK4q+F6BMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZhNTdmZmU4MjJiM2JhN2JjMTk0ZGI3YTczNGM4NWVmY2Vm
MmYyODMwHhcNMjYwMzAyMDcwMDUxWhcNMjYwMzAzMDcwMDUxWjAzMTEwLwYDVQQD
EygwZjc1MGM3OWExYzk0NmZhMWI1ZmE4OTg3ZmM1NjljM2RmZmQwOTBmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvw0Gj+8dVEtj6OP0NpqpVN5VR2KU
DkzDWis75lqE7wCKTzx+mRdLglRev7jvT8GBgzrAfe5rVQ+HE0cQA5AoYPWsKzd4
E/1P98k2AVfIySVjbmNObK8rBXBZIwwib2S6rDkUeKZBwSpJ42LbVNWRB8MZvBJ/
bCmZ2gU4VfKkvddBgQUHuMBe1+kcayZ78FIVu9d0CN/lPe+/IIxj8mbHng9ZJzSc
kYaATY/17Fg6sOQW5wKke8+VhzwoKj9KViLPLYBrq6EpsGtLohEM/noSTcZWYpGw
e+qosq98vL+7sa2h75YGyaMPJV9BWVvs/92+ikjAcwhWufhbjzQWnDtoaQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFA91DHmhyUb6G1+omH/FacPf/QkPMB8GA1UdIwQY
MBaAFGpX/+gis7p7wZTbenNMhe/O8vKDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYWxmXzZDS3p1bnZCbE50NmMweUY3ODd5OG9NLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYi9hZmVmMTItMWYwOC00YjQ2LTk0N2It
Y2EwYzYyNjIxMDk4LzEvYWxmXzZDS3p1bnZCbE50NmMweUY3ODd5OG9NLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hYi9hZmVmMTItMWYwOC00YjQ2LTk0N2ItY2EwYzYyNjIxMDk4
LzEvYWxmXzZDS3p1bnZCbE50NmMweUY3ODd5OG9NLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATiOq3HUf
jrWb4WQoeN2wkNuRLmeAM6hyDV8xUvSFG5wsV8F7EaH5kceWZaw6DLqARcfk1Zo3
IQYnAdgBW9/+x4dOu3aQAJDqLXC/icuHgj7QkCdpKx0m/ojlhlFaiNl84ZUpzY6S
t1jK3/9jOrUVqXWptAGTR/GCRQyr+Jd6x2G/ltDG9Cqpz69zb4hEmy1IYrkcpICN
ZLTd/K/3rCt09UEBtu5CUEQzRcjLVLE0MN+LpXbT6n4uyJSBbr98ssDbEAcp5IFP
7dMS+pOmj6g268+sjRDjDTCtCtcfbbHfWaGyoh903tkkBADYVmRau0GwjrdYY0mV
sL4pGrA1Tuapiw==
-----END CERTIFICATE-----
Generated at Mon Mar 2 18:28:57 2026 by rpki-client