Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/afef12-1f08-4b46-947b-ca0c62621098/1/alf_6CKzunvBlNt6c0yF787y8oM.mft
File: alf_6CKzunvBlNt6c0yF787y8oM.mft (raw, json)
Hash identifier: nTs8L7nlgBXxnovDTCfTR4W8BKXJg9qde/0J2xQcoi8=
Subject key identifier: 8F:5D:86:7C:3D:34:5E:FF:CD:AF:6C:73:39:05:F1:D8:B2:3C:9A:69
Authority key identifier: 6A:57:FF:E8:22:B3:BA:7B:C1:94:DB:7A:73:4C:85:EF:CE:F2:F2:83
Certificate issuer: /CN=6a57ffe822b3ba7bc194db7a734c85efcef2f283
Certificate serial: 019D3A538C04F3550DC80455085ABAC97DFA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/alf_6CKzunvBlNt6c0yF787y8oM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/afef12-1f08-4b46-947b-ca0c62621098/1/alf_6CKzunvBlNt6c0yF787y8oM.mft
Manifest number: 1899
Signing time: Sun 29 Mar 2026 16:00:46 +0000
Manifest this update: Sun 29 Mar 2026 16:00:46 +0000
Manifest next update: Mon 30 Mar 2026 16:00:46 +0000
Files and hashes: 1: 0yjFYiyH8c4Kvnnuzk3XUQWka3U.roa (hash: 8CbnBqCqNuJJeCjiCl9MVRUgtudEnYSxf9iLux5cWW4=)
2: 4Bg7xc4c3gn14eqw3Q_EY2wsLCg.roa (hash: V0r6f18ufhArHZVCr3p5V92fQa1xW01Er8GrT60C2Ak=)
3: 96omvjV6JYdBPZlIVSnCjfm_nWI.asa (hash: 76/x4HVgX0yY3hTYmk0/wth2ENsRf9PyXfMTDy9C3Mw=)
4: UX2lEHFutG5L20cEw2lc-BnrLSE.roa (hash: 94KIEY+pprKz6jYEWQg5ZDOei3RFyR0/YDvRw2h7/6Q=)
5: alf_6CKzunvBlNt6c0yF787y8oM.crl (hash: +tBlPvtRSHNZBtXlGUTWnHuu4qiMrVTudSHPkqixrac=)
6: ee2lwyUuV88L7AjFoomEL9zBWVQ.asa (hash: VmHb/cOnUojnpsLZeINNi+NRCyYc9GZTiZBd+RtvTOg=)
7: jQpb433w3EOWB9aXUd_c_slO2l8.asa (hash: /i2kLyt0tP8dxCxVXb11RPbdCXXg7GHwLDlUBgeEQ7U=)
8: vupopEfOooQGRIzGGFSHPCS81rI.roa (hash: Xeyp95EPsi/om1AKe7B6gcZG7WAjEg0hK0PFbzgsjRw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/afef12-1f08-4b46-947b-ca0c62621098/1/alf_6CKzunvBlNt6c0yF787y8oM.crl
rsync://rpki.ripe.net/repository/DEFAULT/ab/afef12-1f08-4b46-947b-ca0c62621098/1/alf_6CKzunvBlNt6c0yF787y8oM.mft
rsync://rpki.ripe.net/repository/DEFAULT/alf_6CKzunvBlNt6c0yF787y8oM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 08:48:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:3a:53:8c:04:f3:55:0d:c8:04:55:08:5a:ba:c9:7d:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6a57ffe822b3ba7bc194db7a734c85efcef2f283
Validity
Not Before: Mar 29 16:00:46 2026 GMT
Not After : Mar 30 16:00:46 2026 GMT
Subject: CN=8f5d867c3d345effcdaf6c733905f1d8b23c9a69
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:de:5b:19:41:31:49:d9:c9:35:4c:f6:06:0b:
bf:c1:ed:81:2e:0e:d3:e1:b9:23:97:ef:ee:c0:af:
a9:2d:18:24:38:30:f4:e5:b7:f6:e9:38:ec:58:3a:
a5:65:ef:8c:ae:ce:77:9e:86:a6:eb:cf:a0:9e:cf:
0a:f6:98:1f:a7:99:57:73:a1:eb:3a:2a:5b:ef:3f:
c6:b2:86:83:73:a0:9b:c0:ac:ae:1c:ef:13:73:4f:
34:ba:db:df:12:26:ca:9d:84:2a:fa:39:a6:cd:e7:
ca:59:47:51:02:12:12:d0:91:16:42:de:df:ea:9a:
eb:e2:c2:a6:4f:d3:31:52:00:f4:7d:2a:6f:6d:9b:
f3:dd:3b:0c:f0:89:3f:18:83:90:5c:86:7b:5f:f0:
bc:7f:44:45:66:75:c2:30:2c:f0:ab:9e:01:e5:57:
e8:72:30:01:a2:98:83:a4:45:7b:73:23:21:b5:ba:
41:7e:4f:4e:91:0c:b9:ec:10:f7:7a:c7:35:1f:70:
bd:b7:e3:dc:f7:33:f8:21:4b:42:e2:b2:cf:b7:7b:
40:c3:69:b5:d7:32:52:7b:f6:1a:0f:0e:d9:fc:6f:
07:e7:e2:50:e0:ea:4d:28:f4:8f:2d:28:9f:f2:12:
fd:48:ba:a0:39:9a:04:d9:66:ab:5e:4d:d1:62:54:
b5:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:5D:86:7C:3D:34:5E:FF:CD:AF:6C:73:39:05:F1:D8:B2:3C:9A:69
X509v3 Authority Key Identifier:
keyid:6A:57:FF:E8:22:B3:BA:7B:C1:94:DB:7A:73:4C:85:EF:CE:F2:F2:83
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/alf_6CKzunvBlNt6c0yF787y8oM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/afef12-1f08-4b46-947b-ca0c62621098/1/alf_6CKzunvBlNt6c0yF787y8oM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/afef12-1f08-4b46-947b-ca0c62621098/1/alf_6CKzunvBlNt6c0yF787y8oM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:02:7c:a2:15:66:f0:e9:d6:49:2a:8b:ca:e7:75:65:5f:d1:
a0:6b:a6:25:92:f2:03:3c:b7:a3:8c:dc:db:a5:22:42:7d:d3:
df:44:ee:0b:98:62:8e:40:24:3f:e5:af:d7:41:ab:3e:dd:40:
61:4d:f6:9b:57:05:28:7e:c2:81:42:b4:fc:fc:27:7d:67:7c:
1c:21:94:ec:a5:49:81:0f:77:ed:e8:15:3d:41:4d:a4:3d:7a:
b6:10:5e:45:1d:e5:bb:11:0c:a3:9b:c8:73:6b:90:5a:ab:6e:
62:09:8e:9d:a1:94:1c:de:fb:5f:8f:ed:c7:1f:52:2c:fc:92:
53:0a:3d:ca:6f:86:16:28:dc:e0:b5:ef:52:7a:b2:63:ad:91:
3c:bb:d7:3d:ec:38:ae:6e:dc:dc:bd:7b:26:e8:4a:d5:f7:db:
0b:56:06:7f:d1:8b:48:f9:31:ed:cc:c9:02:65:1e:51:6a:a1:
29:c2:9c:93:5d:00:09:32:1d:26:55:96:d4:c7:d1:94:7a:99:
e4:31:e0:7d:24:ee:9d:f9:27:e9:b6:aa:54:17:89:bd:52:c8:
fb:f1:9d:60:07:f8:5a:72:57:12:cf:20:f7:7b:66:32:64:37:
ce:8e:49:42:3b:1f:5f:7a:64:de:80:ba:55:01:10:24:6e:23:
07:6e:e2:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 18:38:31 2026 by rpki-client