Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ab/afef12-1f08-4b46-947b-ca0c62621098/1/alf_6CKzunvBlNt6c0yF787y8oM.mft
File: alf_6CKzunvBlNt6c0yF787y8oM.mft (raw, json)
Hash identifier: XFHfsfyOpwoasPuBXHpgaXD1NRPq2ybcNtgzr6sNIrA=
Subject key identifier: 7F:E7:14:76:5D:3F:9A:41:85:9B:05:DA:B8:76:6E:1E:47:D8:B0:98
Authority key identifier: 6A:57:FF:E8:22:B3:BA:7B:C1:94:DB:7A:73:4C:85:EF:CE:F2:F2:83
Certificate issuer: /CN=6a57ffe822b3ba7bc194db7a734c85efcef2f283
Certificate serial: 01A12956170584805BED63E1054CB4114691
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/alf_6CKzunvBlNt6c0yF787y8oM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/afef12-1f08-4b46-947b-ca0c62621098/1/alf_6CKzunvBlNt6c0yF787y8oM.mft
Manifest number: 1AA6
Signing time: Sun 11 Oct 2026 05:01:10 +0000
Manifest this update: Sun 11 Oct 2026 05:01:10 +0000
Manifest next update: Mon 12 Oct 2026 05:01:10 +0000
Files and hashes: 1: 0yjFYiyH8c4Kvnnuzk3XUQWka3U.roa (hash: 8CbnBqCqNuJJeCjiCl9MVRUgtudEnYSxf9iLux5cWW4=)
2: 4Bg7xc4c3gn14eqw3Q_EY2wsLCg.roa (hash: V0r6f18ufhArHZVCr3p5V92fQa1xW01Er8GrT60C2Ak=)
3: T0p_CQ6AMVLm-bE3Gu4nPWld3sg.asa (hash: 6fHAxuCYrCoEY73irL4Id15Eln6eeDqxElXgndmZ6GU=)
4: UX2lEHFutG5L20cEw2lc-BnrLSE.roa (hash: 94KIEY+pprKz6jYEWQg5ZDOei3RFyR0/YDvRw2h7/6Q=)
5: alf_6CKzunvBlNt6c0yF787y8oM.crl (hash: 9ZzqZrw+0m/At9LiBDg58VQ8FfyYA9oZAg3TtBrZr4Q=)
6: ee2lwyUuV88L7AjFoomEL9zBWVQ.asa (hash: VmHb/cOnUojnpsLZeINNi+NRCyYc9GZTiZBd+RtvTOg=)
7: i2SlqMPIJyfm9VqtbHZISusjWDI.asa (hash: bWbWJgq6kbHvYrLgmY90WRMk9gjloENGHW5CxftJ1Mk=)
8: vupopEfOooQGRIzGGFSHPCS81rI.roa (hash: Xeyp95EPsi/om1AKe7B6gcZG7WAjEg0hK0PFbzgsjRw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/afef12-1f08-4b46-947b-ca0c62621098/1/alf_6CKzunvBlNt6c0yF787y8oM.crl
rsync://rpki.ripe.net/repository/DEFAULT/ab/afef12-1f08-4b46-947b-ca0c62621098/1/alf_6CKzunvBlNt6c0yF787y8oM.mft
rsync://rpki.ripe.net/repository/DEFAULT/alf_6CKzunvBlNt6c0yF787y8oM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 Oct 2026 05:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:29:56:17:05:84:80:5b:ed:63:e1:05:4c:b4:11:46:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6a57ffe822b3ba7bc194db7a734c85efcef2f283
Validity
Not Before: Oct 11 05:01:10 2026 GMT
Not After : Oct 12 05:01:10 2026 GMT
Subject: CN=7fe714765d3f9a41859b05dab8766e1e47d8b098
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:99:c3:8c:74:a9:79:f0:4e:d4:31:57:8b:ee:
04:ab:1f:2d:df:da:1a:21:e9:5d:39:40:bd:9c:2a:
41:61:b2:ae:7b:b9:d1:49:70:ef:fa:59:e9:b5:8a:
31:d2:a7:46:19:e6:69:97:f1:89:a3:c3:9a:68:01:
73:22:2f:80:5f:7b:a2:75:10:1b:4b:ce:7a:17:19:
27:bd:a0:44:a5:2d:c6:84:7b:5c:dc:08:87:3a:34:
61:a4:b6:f5:6b:d9:d6:15:1c:6a:9e:40:42:e0:1f:
58:9d:c9:0e:39:8d:25:b2:39:32:e7:c3:3e:b7:18:
f2:05:23:6a:2b:ed:b1:3e:0b:74:d3:e0:35:aa:e6:
ff:4a:25:2a:6a:e0:ba:cf:19:d4:75:34:a3:63:b0:
7f:e1:2f:aa:2b:db:a7:5e:b0:46:75:36:2d:16:ed:
7c:97:4a:ed:8c:f5:b1:50:9b:d5:02:66:f6:3d:ab:
00:db:21:ac:49:14:78:85:f1:c1:45:67:23:dc:53:
92:f8:9a:d3:2b:cb:bd:4f:9e:9c:d8:ca:62:dd:e5:
ed:99:35:ad:37:60:80:99:39:3d:0d:f0:32:02:c6:
c2:90:24:c1:ac:7b:75:d3:8d:b6:3e:10:20:e6:bc:
36:23:af:78:d7:8b:56:76:d2:ff:6e:4a:e9:6b:98:
71:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:E7:14:76:5D:3F:9A:41:85:9B:05:DA:B8:76:6E:1E:47:D8:B0:98
X509v3 Authority Key Identifier:
keyid:6A:57:FF:E8:22:B3:BA:7B:C1:94:DB:7A:73:4C:85:EF:CE:F2:F2:83
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/alf_6CKzunvBlNt6c0yF787y8oM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/afef12-1f08-4b46-947b-ca0c62621098/1/alf_6CKzunvBlNt6c0yF787y8oM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/afef12-1f08-4b46-947b-ca0c62621098/1/alf_6CKzunvBlNt6c0yF787y8oM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:80:0d:a1:93:12:08:20:2f:4f:d4:1b:fc:df:b8:79:c5:24:
63:ff:80:06:45:cd:d6:e4:ef:60:4d:31:5c:54:f6:4f:4f:2d:
0e:fc:5b:1d:2d:0f:b8:48:80:d1:97:a9:3e:3a:d5:1d:ee:ed:
9b:49:67:26:a9:a9:7a:ad:75:95:a2:be:8e:7a:06:83:be:31:
77:da:4f:6e:3a:e0:88:75:e8:2d:c8:44:f2:ff:5f:f7:46:08:
32:e9:5c:3e:e4:98:f5:ea:a9:48:fc:48:0e:b4:4b:6f:b2:93:
67:13:47:5b:7f:57:8d:0c:02:e5:4b:eb:d9:e4:e8:a7:1d:7b:
14:bc:e0:b6:7b:7d:0e:49:14:cd:60:a1:8e:c0:93:86:43:64:
29:ed:53:58:e7:06:19:73:e7:44:b0:89:92:50:43:34:f0:2b:
53:cb:e8:17:9f:21:9c:0a:b7:6a:9c:fb:cc:67:c3:2d:3d:d1:
64:f5:fb:96:79:66:b9:b7:d2:47:fe:e2:03:43:cf:72:08:af:
76:58:9b:81:33:d7:a9:2c:22:51:7e:7e:2f:85:b3:9b:6a:16:
d9:0c:ac:6e:b0:ca:b6:56:01:3c:4e:61:9a:11:c3:2d:86:46:
c8:1b:5e:11:ba:0a:79:16:10:8a:3d:10:4a:c1:71:9f:0d:26:
75:48:e5:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 14:58:13 2026 by rpki-client