
Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ab/afef12-1f08-4b46-947b-ca0c62621098/1/alf_6CKzunvBlNt6c0yF787y8oM.mft
File: alf_6CKzunvBlNt6c0yF787y8oM.mft (raw, json)
Hash identifier: QG64vWm7XDB/cCScek1vVO32MJmYIVn/S808sYOtWRQ=
Subject key identifier: 0F:BD:90:B6:E1:BF:0D:5E:3E:94:A7:1D:60:61:B4:82:AE:BC:11:CB
Authority key identifier: 6A:57:FF:E8:22:B3:BA:7B:C1:94:DB:7A:73:4C:85:EF:CE:F2:F2:83
Certificate issuer: /CN=6a57ffe822b3ba7bc194db7a734c85efcef2f283
Certificate serial: 01A104A4A860590D083E13362707E721CB0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/alf_6CKzunvBlNt6c0yF787y8oM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/afef12-1f08-4b46-947b-ca0c62621098/1/alf_6CKzunvBlNt6c0yF787y8oM.mft
Manifest number: 1A93
Signing time: Sun 04 Oct 2026 02:01:02 +0000
Manifest this update: Sun 04 Oct 2026 02:01:02 +0000
Manifest next update: Mon 05 Oct 2026 02:01:02 +0000
Files and hashes: 1: 0yjFYiyH8c4Kvnnuzk3XUQWka3U.roa (hash: 8CbnBqCqNuJJeCjiCl9MVRUgtudEnYSxf9iLux5cWW4=)
2: 4Bg7xc4c3gn14eqw3Q_EY2wsLCg.roa (hash: V0r6f18ufhArHZVCr3p5V92fQa1xW01Er8GrT60C2Ak=)
3: T0p_CQ6AMVLm-bE3Gu4nPWld3sg.asa (hash: 6fHAxuCYrCoEY73irL4Id15Eln6eeDqxElXgndmZ6GU=)
4: UX2lEHFutG5L20cEw2lc-BnrLSE.roa (hash: 94KIEY+pprKz6jYEWQg5ZDOei3RFyR0/YDvRw2h7/6Q=)
5: alf_6CKzunvBlNt6c0yF787y8oM.crl (hash: xEGPC+hvFBSREd8d2yfOwYKwcIYeGFJNVV85OVqlChk=)
6: ee2lwyUuV88L7AjFoomEL9zBWVQ.asa (hash: VmHb/cOnUojnpsLZeINNi+NRCyYc9GZTiZBd+RtvTOg=)
7: i2SlqMPIJyfm9VqtbHZISusjWDI.asa (hash: bWbWJgq6kbHvYrLgmY90WRMk9gjloENGHW5CxftJ1Mk=)
8: vupopEfOooQGRIzGGFSHPCS81rI.roa (hash: Xeyp95EPsi/om1AKe7B6gcZG7WAjEg0hK0PFbzgsjRw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/afef12-1f08-4b46-947b-ca0c62621098/1/alf_6CKzunvBlNt6c0yF787y8oM.crl
rsync://rpki.ripe.net/repository/DEFAULT/ab/afef12-1f08-4b46-947b-ca0c62621098/1/alf_6CKzunvBlNt6c0yF787y8oM.mft
rsync://rpki.ripe.net/repository/DEFAULT/alf_6CKzunvBlNt6c0yF787y8oM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 05 Oct 2026 02:01:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:04:a4:a8:60:59:0d:08:3e:13:36:27:07:e7:21:cb:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6a57ffe822b3ba7bc194db7a734c85efcef2f283
Validity
Not Before: Oct 4 02:01:02 2026 GMT
Not After : Oct 5 02:01:02 2026 GMT
Subject: CN=0fbd90b6e1bf0d5e3e94a71d6061b482aebc11cb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:1f:db:50:2e:83:a4:11:9a:f7:44:f7:6a:75:
25:f4:d7:f7:b3:de:c5:8c:8c:fd:b9:9f:d6:86:e0:
81:59:dc:99:e9:71:0e:d7:8f:ee:87:c6:b7:ed:c1:
b0:ee:bf:3c:68:bf:9f:10:5d:b9:a5:0f:12:ad:9d:
9e:63:7a:1f:8c:c3:bd:95:12:ea:b3:b6:59:72:77:
54:18:ca:46:b2:f1:7e:b5:19:bc:1a:92:e2:70:39:
2f:b3:ab:86:63:d7:ec:13:02:f4:ec:88:fa:1e:23:
f5:7d:e9:31:5d:42:31:54:cd:0c:2b:d5:8d:ea:85:
55:98:9b:d3:62:62:02:65:86:ba:14:84:3d:4c:47:
26:54:2a:8e:98:67:fa:36:fe:7a:54:37:97:d5:2e:
6a:b6:0e:c8:c8:00:cd:3b:e2:2b:3b:a3:b6:bc:1f:
02:25:6e:33:96:3c:1d:93:4e:a3:b6:5f:65:1a:a7:
bd:08:13:b4:44:53:e7:3e:90:b2:21:22:4f:e9:69:
51:19:8a:95:b1:1d:2a:e7:00:fe:cc:9d:46:5f:39:
e0:96:18:80:b7:c0:81:9d:44:f0:25:61:91:f1:ea:
cb:3f:2a:56:10:5a:c9:dd:bc:a4:d5:c2:64:fe:44:
81:57:48:33:80:07:7c:5f:a9:16:1a:79:42:5b:48:
1e:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:BD:90:B6:E1:BF:0D:5E:3E:94:A7:1D:60:61:B4:82:AE:BC:11:CB
X509v3 Authority Key Identifier:
keyid:6A:57:FF:E8:22:B3:BA:7B:C1:94:DB:7A:73:4C:85:EF:CE:F2:F2:83
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/alf_6CKzunvBlNt6c0yF787y8oM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/afef12-1f08-4b46-947b-ca0c62621098/1/alf_6CKzunvBlNt6c0yF787y8oM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/afef12-1f08-4b46-947b-ca0c62621098/1/alf_6CKzunvBlNt6c0yF787y8oM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:f1:e7:de:4d:66:84:85:df:8d:4b:ef:58:fc:a3:00:dd:5d:
e7:ce:5f:c4:e2:e1:01:52:1f:e9:d7:09:2c:64:77:6e:75:a9:
ec:36:45:d0:b6:c4:16:fe:07:b5:f5:c7:22:5b:c4:34:d7:d9:
32:9e:55:9f:25:04:f8:89:aa:ea:6b:30:02:f8:3d:b2:00:d9:
66:a8:7f:fe:5c:8e:a6:0b:4e:49:bf:dc:b6:98:6e:55:83:6c:
00:88:6d:d8:5e:95:93:bc:f0:e5:b7:f9:7a:03:28:ac:8d:83:
6f:0f:5c:87:e4:47:b4:60:8c:f5:8a:6a:66:f7:0a:63:68:90:
fc:47:d9:3b:9a:a5:96:83:ff:01:37:a3:6c:49:ca:b8:c5:89:
75:3d:d9:00:d5:10:c8:fb:91:6d:ed:f9:0f:b4:65:1a:7b:5f:
9f:8b:16:c6:35:b3:3b:86:63:26:7a:33:f4:58:17:72:85:71:
1d:b2:9c:6a:09:e0:3f:18:cd:c7:7b:de:99:48:fe:8b:a9:a7:
df:4a:c0:11:ec:e2:92:65:f1:37:18:d1:8a:bb:72:0f:38:3a:
59:f3:b0:c8:8d:60:69:4e:58:8b:69:c6:7c:82:82:a3:3a:d6:
c1:70:09:24:c0:8d:2e:70:33:09:50:8e:14:53:1e:af:70:ca:
33:52:b6:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 14:57:51 2026 by rpki-client