Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/afef12-1f08-4b46-947b-ca0c62621098/1/alf_6CKzunvBlNt6c0yF787y8oM.mft
File: alf_6CKzunvBlNt6c0yF787y8oM.mft (raw, json)
Hash identifier: JRt4Vh7e/BltPXhCqnZtn229YFrAE7hr8h4SDj4VggU=
Subject key identifier: E9:B8:54:4F:1C:9D:48:29:D6:29:05:E4:A3:04:72:6C:D4:92:1C:D5
Authority key identifier: 6A:57:FF:E8:22:B3:BA:7B:C1:94:DB:7A:73:4C:85:EF:CE:F2:F2:83
Certificate issuer: /CN=6a57ffe822b3ba7bc194db7a734c85efcef2f283
Certificate serial: 019FA9073AD52B0557C16AF451A55A732C2C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/alf_6CKzunvBlNt6c0yF787y8oM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/afef12-1f08-4b46-947b-ca0c62621098/1/alf_6CKzunvBlNt6c0yF787y8oM.mft
Manifest number: 19DF
Signing time: Tue 28 Jul 2026 14:00:51 +0000
Manifest this update: Tue 28 Jul 2026 14:00:51 +0000
Manifest next update: Wed 29 Jul 2026 14:00:51 +0000
Files and hashes: 1: 0yjFYiyH8c4Kvnnuzk3XUQWka3U.roa (hash: 8CbnBqCqNuJJeCjiCl9MVRUgtudEnYSxf9iLux5cWW4=)
2: 4Bg7xc4c3gn14eqw3Q_EY2wsLCg.roa (hash: V0r6f18ufhArHZVCr3p5V92fQa1xW01Er8GrT60C2Ak=)
3: T0p_CQ6AMVLm-bE3Gu4nPWld3sg.asa (hash: 6fHAxuCYrCoEY73irL4Id15Eln6eeDqxElXgndmZ6GU=)
4: UX2lEHFutG5L20cEw2lc-BnrLSE.roa (hash: 94KIEY+pprKz6jYEWQg5ZDOei3RFyR0/YDvRw2h7/6Q=)
5: alf_6CKzunvBlNt6c0yF787y8oM.crl (hash: hDlllNFkaD4IBbd9w5E4JQ1Rrf9ix4XWec+Ug4Bomsw=)
6: ee2lwyUuV88L7AjFoomEL9zBWVQ.asa (hash: VmHb/cOnUojnpsLZeINNi+NRCyYc9GZTiZBd+RtvTOg=)
7: i2SlqMPIJyfm9VqtbHZISusjWDI.asa (hash: bWbWJgq6kbHvYrLgmY90WRMk9gjloENGHW5CxftJ1Mk=)
8: vupopEfOooQGRIzGGFSHPCS81rI.roa (hash: Xeyp95EPsi/om1AKe7B6gcZG7WAjEg0hK0PFbzgsjRw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/afef12-1f08-4b46-947b-ca0c62621098/1/alf_6CKzunvBlNt6c0yF787y8oM.crl
rsync://rpki.ripe.net/repository/DEFAULT/ab/afef12-1f08-4b46-947b-ca0c62621098/1/alf_6CKzunvBlNt6c0yF787y8oM.mft
rsync://rpki.ripe.net/repository/DEFAULT/alf_6CKzunvBlNt6c0yF787y8oM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a9:07:3a:d5:2b:05:57:c1:6a:f4:51:a5:5a:73:2c:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6a57ffe822b3ba7bc194db7a734c85efcef2f283
Validity
Not Before: Jul 28 14:00:51 2026 GMT
Not After : Jul 29 14:00:51 2026 GMT
Subject: CN=e9b8544f1c9d4829d62905e4a304726cd4921cd5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:63:1b:09:e6:dc:5d:25:a1:e1:6c:17:2f:fc:
da:5d:58:f9:11:c1:0a:25:c7:a4:3f:81:08:1c:fb:
b7:4e:4e:d2:16:62:98:02:e8:5e:88:0e:65:e3:52:
9a:59:e4:78:b5:e3:82:f6:12:07:8f:06:d7:33:dc:
7f:8f:40:fc:fb:7f:ae:c4:af:08:18:41:e0:0b:08:
59:66:c7:fc:62:cc:27:51:39:39:f6:76:97:bc:e6:
ae:96:75:41:cc:40:53:bb:34:60:71:50:f5:50:89:
0c:3b:16:3f:b4:5f:a8:12:3a:8b:e7:38:82:19:8f:
69:35:e8:a9:92:78:e9:a8:eb:30:5c:98:5c:39:f6:
41:ca:78:c7:54:1f:c4:3c:24:cf:bd:55:d5:d3:4e:
9b:cf:6b:23:35:66:4c:ee:fd:67:29:2e:8a:21:a6:
c7:7c:3d:6f:67:8e:c3:b3:3d:06:b9:57:c8:eb:55:
9c:7d:bc:fa:d1:9c:8b:f8:6d:ca:38:0d:b6:b3:f4:
8e:1b:d0:12:02:b5:a7:bd:eb:0c:3c:a0:75:89:62:
9c:70:a3:0a:bd:f3:74:7e:84:d6:93:29:2f:92:ac:
f4:5a:aa:d9:18:6e:9a:30:bc:89:11:dd:68:05:3b:
37:c8:08:7c:0c:5f:c0:65:f6:ec:5f:c4:7e:fa:58:
e3:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:B8:54:4F:1C:9D:48:29:D6:29:05:E4:A3:04:72:6C:D4:92:1C:D5
X509v3 Authority Key Identifier:
keyid:6A:57:FF:E8:22:B3:BA:7B:C1:94:DB:7A:73:4C:85:EF:CE:F2:F2:83
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/alf_6CKzunvBlNt6c0yF787y8oM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/afef12-1f08-4b46-947b-ca0c62621098/1/alf_6CKzunvBlNt6c0yF787y8oM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/afef12-1f08-4b46-947b-ca0c62621098/1/alf_6CKzunvBlNt6c0yF787y8oM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:a4:10:7c:d3:64:28:ce:a8:40:68:65:5b:bd:6c:ba:22:81:
7b:35:25:d9:be:43:63:30:29:55:ea:c8:94:6f:62:19:a1:51:
bb:3d:68:4f:6c:78:f1:23:81:2f:a4:53:56:7d:78:e8:12:2b:
60:23:a0:e6:7e:41:bd:a4:8a:c0:0e:d2:58:45:2d:00:67:65:
c6:57:be:05:98:4a:97:8d:06:f5:8c:6f:0b:26:87:ec:92:a7:
12:68:8f:6a:9e:98:2d:63:1c:53:19:59:10:0e:b4:cb:0d:bf:
37:6a:b7:63:08:84:b8:ae:a6:13:47:c2:c5:67:db:4d:9d:47:
27:b9:ba:77:43:41:c5:c4:79:5a:b3:4c:1a:9d:f8:97:6e:30:
aa:32:50:04:cd:68:15:c9:47:17:11:c1:a4:1f:5e:b0:2f:65:
59:c1:bc:ec:11:32:4b:6f:48:9b:3b:d7:2e:dd:93:0a:d3:57:
a8:22:7d:cc:6b:0c:8b:0b:1c:12:29:0f:35:8a:29:e2:c4:8e:
ad:34:ec:18:33:26:e5:7e:69:9f:38:77:f4:a5:bf:b5:71:c0:
5a:16:52:f1:dd:20:7e:d1:e8:04:0d:f3:aa:e6:01:ae:f9:01:
db:18:ee:7e:4b:20:3c:9e:ea:99:a9:20:11:e0:d4:6b:ad:33:
55:1e:30:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 17:26:04 2026 by rpki-client