Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/afef12-1f08-4b46-947b-ca0c62621098/1/alf_6CKzunvBlNt6c0yF787y8oM.mft
File: alf_6CKzunvBlNt6c0yF787y8oM.mft (raw, json)
Hash identifier: xoWM67pWarVAJPx9+Y/yDdy1Y7f6vDmOucNWGL/oJlA=
Subject key identifier: AD:29:AE:B7:6E:B8:B7:A2:16:39:4B:AB:F9:4D:4F:9C:DA:07:D5:4A
Authority key identifier: 6A:57:FF:E8:22:B3:BA:7B:C1:94:DB:7A:73:4C:85:EF:CE:F2:F2:83
Certificate issuer: /CN=6a57ffe822b3ba7bc194db7a734c85efcef2f283
Certificate serial: 019F126602AADA0683AEF114D077A0BF99E6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/alf_6CKzunvBlNt6c0yF787y8oM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/afef12-1f08-4b46-947b-ca0c62621098/1/alf_6CKzunvBlNt6c0yF787y8oM.mft
Manifest number: 1991
Signing time: Mon 29 Jun 2026 08:01:42 +0000
Manifest this update: Mon 29 Jun 2026 08:01:42 +0000
Manifest next update: Tue 30 Jun 2026 08:01:42 +0000
Files and hashes: 1: 0yjFYiyH8c4Kvnnuzk3XUQWka3U.roa (hash: 8CbnBqCqNuJJeCjiCl9MVRUgtudEnYSxf9iLux5cWW4=)
2: 4Bg7xc4c3gn14eqw3Q_EY2wsLCg.roa (hash: V0r6f18ufhArHZVCr3p5V92fQa1xW01Er8GrT60C2Ak=)
3: T0p_CQ6AMVLm-bE3Gu4nPWld3sg.asa (hash: 6fHAxuCYrCoEY73irL4Id15Eln6eeDqxElXgndmZ6GU=)
4: UX2lEHFutG5L20cEw2lc-BnrLSE.roa (hash: 94KIEY+pprKz6jYEWQg5ZDOei3RFyR0/YDvRw2h7/6Q=)
5: alf_6CKzunvBlNt6c0yF787y8oM.crl (hash: FpULXn4D8Axv4hVWhHZf8n7BL0PokwZOki+jPUMoLwc=)
6: ee2lwyUuV88L7AjFoomEL9zBWVQ.asa (hash: VmHb/cOnUojnpsLZeINNi+NRCyYc9GZTiZBd+RtvTOg=)
7: i2SlqMPIJyfm9VqtbHZISusjWDI.asa (hash: bWbWJgq6kbHvYrLgmY90WRMk9gjloENGHW5CxftJ1Mk=)
8: vupopEfOooQGRIzGGFSHPCS81rI.roa (hash: Xeyp95EPsi/om1AKe7B6gcZG7WAjEg0hK0PFbzgsjRw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/afef12-1f08-4b46-947b-ca0c62621098/1/alf_6CKzunvBlNt6c0yF787y8oM.crl
rsync://rpki.ripe.net/repository/DEFAULT/ab/afef12-1f08-4b46-947b-ca0c62621098/1/alf_6CKzunvBlNt6c0yF787y8oM.mft
rsync://rpki.ripe.net/repository/DEFAULT/alf_6CKzunvBlNt6c0yF787y8oM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 30 Jun 2026 02:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:12:66:02:aa:da:06:83:ae:f1:14:d0:77:a0:bf:99:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6a57ffe822b3ba7bc194db7a734c85efcef2f283
Validity
Not Before: Jun 29 08:01:42 2026 GMT
Not After : Jun 30 08:01:42 2026 GMT
Subject: CN=ad29aeb76eb8b7a216394babf94d4f9cda07d54a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:41:b7:61:35:08:98:91:5a:1a:10:f6:c3:43:
10:e7:eb:8e:d1:60:f6:31:4a:56:c3:61:b2:f8:c9:
8b:48:c5:44:43:56:8c:2c:eb:37:b6:3a:3b:2b:8f:
0d:1e:8d:b9:3e:19:4d:9a:07:3e:3d:f5:6d:71:48:
73:ff:72:83:f0:e1:de:dd:11:4f:ff:24:b7:3d:c0:
94:07:5a:15:fd:b2:9a:12:ad:d4:f3:89:b0:31:c9:
5b:1e:1c:91:4a:52:2d:65:a4:ad:b5:c8:2a:a6:cd:
28:c3:83:96:e3:5d:15:9c:4a:26:41:85:85:21:8d:
a1:37:8d:74:5a:ac:ae:20:3d:66:b2:f0:e3:61:0e:
c1:56:b4:23:69:ba:01:e7:76:1b:6a:5c:91:6b:fa:
51:3f:66:a7:83:e8:e2:84:a8:4a:de:c6:16:03:41:
a6:c8:29:91:ea:a7:ea:56:bc:47:ff:d0:7c:9e:7f:
33:15:ce:eb:26:b0:c1:6f:96:7a:7c:7c:c8:cf:21:
98:81:32:92:5a:98:53:23:f7:54:35:1d:58:bd:95:
89:37:f8:9e:39:0f:46:cd:e7:e7:d3:1d:c1:83:e7:
fd:3b:74:9b:71:8d:03:05:91:a7:94:e8:f1:c2:99:
bd:12:8c:8c:df:78:64:02:71:8a:a0:09:a6:2d:96:
e6:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:29:AE:B7:6E:B8:B7:A2:16:39:4B:AB:F9:4D:4F:9C:DA:07:D5:4A
X509v3 Authority Key Identifier:
keyid:6A:57:FF:E8:22:B3:BA:7B:C1:94:DB:7A:73:4C:85:EF:CE:F2:F2:83
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/alf_6CKzunvBlNt6c0yF787y8oM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/afef12-1f08-4b46-947b-ca0c62621098/1/alf_6CKzunvBlNt6c0yF787y8oM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/afef12-1f08-4b46-947b-ca0c62621098/1/alf_6CKzunvBlNt6c0yF787y8oM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:05:99:e3:c8:a6:1a:47:6d:9a:c6:e9:5b:e0:66:c0:a6:f2:
b2:98:f2:ba:dd:6b:45:25:34:62:32:fc:53:af:f8:63:83:25:
d2:35:15:bc:b2:1a:b6:ff:c2:89:b4:6e:a2:24:f5:9b:b8:6f:
3f:df:ad:5c:61:8a:41:43:e4:15:4f:36:35:5b:4d:ab:b9:d7:
7e:e1:95:bd:6c:97:c3:c3:fa:60:5b:4b:09:28:be:2f:be:60:
39:e3:a0:f4:81:52:2a:60:4e:6c:f1:73:62:6d:d9:78:75:0d:
b3:28:fd:18:eb:50:df:c3:e3:ba:e3:e2:b2:39:e0:c7:05:ce:
bd:ea:ed:7c:c7:33:6a:c0:70:c9:e8:fd:7c:ae:48:01:e4:4f:
ad:fa:41:d3:76:05:4d:81:8f:44:1f:60:d6:79:59:5f:de:c9:
54:18:90:ee:03:b4:96:2f:74:20:1e:8d:6f:f5:28:50:57:1b:
68:2b:d7:86:95:fe:12:64:9e:45:9c:27:92:e9:6f:7c:24:0d:
1c:33:bb:c1:6b:89:9f:ba:48:c1:7e:67:de:da:c6:b4:67:9d:
a3:4f:9b:d6:83:9b:47:d2:a4:1c:b5:c8:a4:72:79:91:1d:c0:
76:49:a6:e0:67:ee:da:43:81:cb:83:fe:94:b3:5c:f3:14:ad:
47:9e:90:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 29 11:45:10 2026 by rpki-client