Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/afef12-1f08-4b46-947b-ca0c62621098/1/alf_6CKzunvBlNt6c0yF787y8oM.mft
File: alf_6CKzunvBlNt6c0yF787y8oM.mft (raw, json)
Hash identifier: O8wV0VCQxzEmnS3fNkt8wRdwdZGDLT6I2W+FihG34wg=
Subject key identifier: 2F:71:D6:9C:12:B0:24:38:92:EF:0C:17:6C:93:E6:C3:B8:16:32:1C
Authority key identifier: 6A:57:FF:E8:22:B3:BA:7B:C1:94:DB:7A:73:4C:85:EF:CE:F2:F2:83
Certificate issuer: /CN=6a57ffe822b3ba7bc194db7a734c85efcef2f283
Certificate serial: 019D25163C41C83589E541D1A5CF2FC388A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/alf_6CKzunvBlNt6c0yF787y8oM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/afef12-1f08-4b46-947b-ca0c62621098/1/alf_6CKzunvBlNt6c0yF787y8oM.mft
Manifest number: 188E
Signing time: Wed 25 Mar 2026 13:01:47 +0000
Manifest this update: Wed 25 Mar 2026 13:01:47 +0000
Manifest next update: Thu 26 Mar 2026 13:01:47 +0000
Files and hashes: 1: 0yjFYiyH8c4Kvnnuzk3XUQWka3U.roa (hash: 8CbnBqCqNuJJeCjiCl9MVRUgtudEnYSxf9iLux5cWW4=)
2: 4Bg7xc4c3gn14eqw3Q_EY2wsLCg.roa (hash: V0r6f18ufhArHZVCr3p5V92fQa1xW01Er8GrT60C2Ak=)
3: 96omvjV6JYdBPZlIVSnCjfm_nWI.asa (hash: 76/x4HVgX0yY3hTYmk0/wth2ENsRf9PyXfMTDy9C3Mw=)
4: UX2lEHFutG5L20cEw2lc-BnrLSE.roa (hash: 94KIEY+pprKz6jYEWQg5ZDOei3RFyR0/YDvRw2h7/6Q=)
5: alf_6CKzunvBlNt6c0yF787y8oM.crl (hash: fCeH/WO9teorJYaGDt3ek+g4KJSir7N0kMnOwrx+HkA=)
6: ee2lwyUuV88L7AjFoomEL9zBWVQ.asa (hash: VmHb/cOnUojnpsLZeINNi+NRCyYc9GZTiZBd+RtvTOg=)
7: jQpb433w3EOWB9aXUd_c_slO2l8.asa (hash: /i2kLyt0tP8dxCxVXb11RPbdCXXg7GHwLDlUBgeEQ7U=)
8: vupopEfOooQGRIzGGFSHPCS81rI.roa (hash: Xeyp95EPsi/om1AKe7B6gcZG7WAjEg0hK0PFbzgsjRw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/afef12-1f08-4b46-947b-ca0c62621098/1/alf_6CKzunvBlNt6c0yF787y8oM.crl
rsync://rpki.ripe.net/repository/DEFAULT/ab/afef12-1f08-4b46-947b-ca0c62621098/1/alf_6CKzunvBlNt6c0yF787y8oM.mft
rsync://rpki.ripe.net/repository/DEFAULT/alf_6CKzunvBlNt6c0yF787y8oM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 13:01:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:16:3c:41:c8:35:89:e5:41:d1:a5:cf:2f:c3:88:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6a57ffe822b3ba7bc194db7a734c85efcef2f283
Validity
Not Before: Mar 25 13:01:47 2026 GMT
Not After : Mar 26 13:01:47 2026 GMT
Subject: CN=2f71d69c12b0243892ef0c176c93e6c3b816321c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:6e:2e:e6:72:39:d7:fe:87:96:a1:ed:a1:a2:
18:2c:ae:a6:f1:09:3e:b0:a2:ad:59:8b:b6:d0:04:
1f:84:ee:24:ee:b8:fe:b7:28:13:36:53:11:02:9b:
cd:4a:7a:ad:91:15:5d:cf:1a:1b:17:a3:11:c0:53:
67:4a:39:04:c7:b7:ba:65:13:9b:f0:55:35:ae:a2:
61:c4:ef:c5:e0:a2:d2:f8:0b:a1:c2:05:d5:e9:be:
e3:50:01:84:21:16:b6:7a:1a:5f:b0:9b:1b:d7:b5:
76:bc:4c:f7:b2:f8:b6:cb:07:57:be:61:39:1d:28:
d2:e7:ab:54:04:46:8d:2b:dc:f0:4d:32:8a:d8:58:
b0:12:3f:ff:ce:f1:c1:81:39:20:5a:e1:33:89:c2:
fd:bf:69:3c:c4:32:09:a7:37:a4:9a:5b:cb:bc:11:
ad:ff:ff:9b:35:d6:fa:de:e2:55:6e:bb:e0:21:ab:
19:7a:b7:64:c3:e2:b4:93:fc:86:be:ce:5d:a7:6e:
ff:a4:8f:2c:b5:fd:59:14:72:c5:e0:b2:37:99:72:
b1:11:67:f5:50:e7:dd:ad:76:56:c5:d8:1d:b1:c9:
9e:f3:cb:5b:02:4c:75:f5:4e:fc:f4:56:08:6a:55:
81:d3:a2:c0:db:ea:66:54:2b:2d:db:ef:53:93:63:
15:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:71:D6:9C:12:B0:24:38:92:EF:0C:17:6C:93:E6:C3:B8:16:32:1C
X509v3 Authority Key Identifier:
keyid:6A:57:FF:E8:22:B3:BA:7B:C1:94:DB:7A:73:4C:85:EF:CE:F2:F2:83
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/alf_6CKzunvBlNt6c0yF787y8oM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/afef12-1f08-4b46-947b-ca0c62621098/1/alf_6CKzunvBlNt6c0yF787y8oM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/afef12-1f08-4b46-947b-ca0c62621098/1/alf_6CKzunvBlNt6c0yF787y8oM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:52:d1:0f:ff:53:ab:b0:37:79:32:84:fd:51:7a:20:b4:cf:
19:23:c7:25:94:34:96:e9:c3:56:75:3c:49:f4:e7:fa:2f:3a:
6a:40:c9:a8:4e:1c:a7:b3:72:6b:6b:a5:08:e4:36:28:5b:60:
32:58:85:1c:86:32:1b:e2:55:4e:1a:ae:8c:32:2d:a9:ed:2d:
b0:96:05:42:2d:59:c5:86:c7:27:e4:6e:33:a6:5e:82:96:74:
b5:24:7d:d2:cf:16:5c:b5:4c:a0:b8:1b:f2:1a:31:20:27:80:
cf:05:8f:65:07:18:3e:d2:26:bd:34:1a:3c:35:80:fc:15:91:
51:9d:c4:e7:3d:bb:87:70:de:dc:d1:d2:be:da:11:f4:97:13:
a5:01:cc:b9:98:ec:4f:c1:a4:f5:54:93:8d:a0:9f:d5:b8:db:
73:d2:e1:fb:ea:50:55:08:27:fb:9d:44:92:7d:17:28:a8:86:
a3:83:55:92:2b:10:ab:aa:88:77:15:30:ae:b8:4c:74:e6:71:
b8:f9:c7:5c:38:cd:2c:5d:c7:19:69:44:16:80:27:54:bf:63:
18:1f:82:62:b4:8c:5e:db:98:e2:05:a7:91:98:58:6d:5a:78:
8b:84:02:64:ea:2f:97:be:20:03:93:7c:c4:07:31:7f:07:e9:
17:3c:3d:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 25 21:19:27 2026 by rpki-client