Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ab/afef12-1f08-4b46-947b-ca0c62621098/1/alf_6CKzunvBlNt6c0yF787y8oM.mft
File: alf_6CKzunvBlNt6c0yF787y8oM.mft (raw, json)
Hash identifier: eJ7TkGb7GOnRAQKhJ+IepfqZpEJNycQjm1WaDbxbnN8=
Subject key identifier: 43:0C:64:4F:F2:9A:2F:68:C2:C7:F5:4D:1E:FC:B4:45:F7:80:FE:FB
Authority key identifier: 6A:57:FF:E8:22:B3:BA:7B:C1:94:DB:7A:73:4C:85:EF:CE:F2:F2:83
Certificate issuer: /CN=6a57ffe822b3ba7bc194db7a734c85efcef2f283
Certificate serial: 01A03DBABD24159DD0B5C69C9DF4FDE27CD8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/alf_6CKzunvBlNt6c0yF787y8oM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/afef12-1f08-4b46-947b-ca0c62621098/1/alf_6CKzunvBlNt6c0yF787y8oM.mft
Manifest number: 1A2C
Signing time: Wed 26 Aug 2026 11:00:43 +0000
Manifest this update: Wed 26 Aug 2026 11:00:43 +0000
Manifest next update: Thu 27 Aug 2026 11:00:43 +0000
Files and hashes: 1: 0yjFYiyH8c4Kvnnuzk3XUQWka3U.roa (hash: 8CbnBqCqNuJJeCjiCl9MVRUgtudEnYSxf9iLux5cWW4=)
2: 4Bg7xc4c3gn14eqw3Q_EY2wsLCg.roa (hash: V0r6f18ufhArHZVCr3p5V92fQa1xW01Er8GrT60C2Ak=)
3: T0p_CQ6AMVLm-bE3Gu4nPWld3sg.asa (hash: 6fHAxuCYrCoEY73irL4Id15Eln6eeDqxElXgndmZ6GU=)
4: UX2lEHFutG5L20cEw2lc-BnrLSE.roa (hash: 94KIEY+pprKz6jYEWQg5ZDOei3RFyR0/YDvRw2h7/6Q=)
5: alf_6CKzunvBlNt6c0yF787y8oM.crl (hash: boeRuFQgCy/mJdfnmiB1tH8CjFaeXYIZMHpnDqu/yhA=)
6: ee2lwyUuV88L7AjFoomEL9zBWVQ.asa (hash: VmHb/cOnUojnpsLZeINNi+NRCyYc9GZTiZBd+RtvTOg=)
7: i2SlqMPIJyfm9VqtbHZISusjWDI.asa (hash: bWbWJgq6kbHvYrLgmY90WRMk9gjloENGHW5CxftJ1Mk=)
8: vupopEfOooQGRIzGGFSHPCS81rI.roa (hash: Xeyp95EPsi/om1AKe7B6gcZG7WAjEg0hK0PFbzgsjRw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/afef12-1f08-4b46-947b-ca0c62621098/1/alf_6CKzunvBlNt6c0yF787y8oM.crl
rsync://rpki.ripe.net/repository/DEFAULT/ab/afef12-1f08-4b46-947b-ca0c62621098/1/alf_6CKzunvBlNt6c0yF787y8oM.mft
rsync://rpki.ripe.net/repository/DEFAULT/alf_6CKzunvBlNt6c0yF787y8oM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 27 Aug 2026 08:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:3d:ba:bd:24:15:9d:d0:b5:c6:9c:9d:f4:fd:e2:7c:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6a57ffe822b3ba7bc194db7a734c85efcef2f283
Validity
Not Before: Aug 26 11:00:43 2026 GMT
Not After : Aug 27 11:00:43 2026 GMT
Subject: CN=430c644ff29a2f68c2c7f54d1efcb445f780fefb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:cf:ac:3d:fc:7f:0c:60:96:80:12:4c:2b:42:
d4:b6:f2:f1:32:1c:82:89:f2:05:79:50:9f:cb:a5:
89:a9:6c:cb:36:55:ac:47:b1:74:72:73:ab:c0:aa:
c4:52:00:e3:38:6e:6f:07:d8:8c:c1:64:5f:a4:ec:
62:80:a5:93:27:cb:4e:ce:ce:36:74:4f:4b:81:e5:
f4:e6:01:f4:ff:d1:c2:80:de:c5:37:ea:33:b4:4f:
e2:12:3b:28:aa:50:ef:f0:01:be:3d:10:e3:c6:1f:
f6:78:61:bc:b3:46:e7:4d:a9:41:dc:42:94:6d:74:
0b:60:b3:9e:00:d7:71:7e:6a:75:c1:7c:c1:4f:fd:
f6:ff:07:f9:9f:1d:f7:d2:96:ad:38:74:3b:57:17:
a2:63:72:93:1c:49:14:54:ac:59:04:b0:34:94:d7:
ee:88:a0:49:7e:75:9d:a6:c8:c3:96:a5:4c:70:e2:
67:06:09:59:d5:7b:9b:5e:f7:e0:4c:e8:2a:8e:db:
38:ef:61:03:1d:c1:e3:6e:b1:6a:e4:4f:2f:12:2c:
1d:e5:bc:1d:ce:8d:ec:53:84:2e:5f:35:02:85:e0:
17:52:a1:30:9e:45:3f:8b:df:9f:31:91:e0:7d:d0:
8c:8c:c2:68:88:a8:1b:e1:c9:cd:fb:85:cb:d8:1e:
6c:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:0C:64:4F:F2:9A:2F:68:C2:C7:F5:4D:1E:FC:B4:45:F7:80:FE:FB
X509v3 Authority Key Identifier:
keyid:6A:57:FF:E8:22:B3:BA:7B:C1:94:DB:7A:73:4C:85:EF:CE:F2:F2:83
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/alf_6CKzunvBlNt6c0yF787y8oM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/afef12-1f08-4b46-947b-ca0c62621098/1/alf_6CKzunvBlNt6c0yF787y8oM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/afef12-1f08-4b46-947b-ca0c62621098/1/alf_6CKzunvBlNt6c0yF787y8oM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:98:3d:83:22:74:64:a9:f5:b7:02:2b:c6:66:97:dc:9e:99:
16:53:86:08:04:f6:e3:50:d2:d9:64:2a:7e:37:f6:98:96:92:
ab:66:89:ef:5d:4e:0e:b8:d5:26:fa:5f:94:c0:c4:cb:9e:09:
d0:6a:ee:fe:d1:2f:23:54:2a:c0:bf:aa:95:d1:4d:b7:75:6a:
d7:fe:bb:50:42:32:5a:24:55:71:f2:3c:2e:e1:03:12:bc:b5:
23:10:71:6a:64:e2:2f:2b:74:3e:c1:37:12:3b:0a:43:6c:96:
9a:42:a1:7f:d7:55:3d:ff:5f:16:ef:b2:24:f5:13:59:52:47:
f8:22:f3:42:a4:3c:5f:9c:d9:d8:a3:03:33:27:bf:37:08:bb:
de:cb:84:d2:e3:cd:b0:69:54:fe:96:4d:da:f7:23:1f:55:4e:
61:76:8b:98:3f:ec:c0:dc:f8:04:fb:5c:f5:99:79:84:a6:ca:
9a:b3:9b:15:fb:82:57:20:49:c4:b9:c0:f8:5c:4c:55:2d:65:
ae:ea:13:9d:8c:69:cb:6e:bc:06:40:7f:f0:74:88:ea:23:47:
52:30:a5:22:18:19:f4:4d:e4:9b:9c:24:4a:2a:99:a0:17:3b:
5b:78:df:dd:17:1a:ca:c3:46:fb:d5:fe:31:06:54:aa:1a:ae:
37:66:e6:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 26 13:09:46 2026 by rpki-client