Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/efdfc9-da3a-46bd-8300-e1c8a4febdee/1/TON_cckzv4JxGMY8B3dN6YZF0Bk.mft
File: TON_cckzv4JxGMY8B3dN6YZF0Bk.mft (raw, json)
Hash identifier: y9h1DihnuDV7HMqhCbqwwpAAi/LzE5zn4NeHWejGoOI=
Subject key identifier: 8B:75:69:8F:99:13:9D:DE:C1:FC:88:AA:D3:9B:D4:63:12:B7:D7:94
Authority key identifier: 4C:E3:7F:71:C9:33:BF:82:71:18:C6:3C:07:77:4D:E9:86:45:D0:19
Certificate issuer: /CN=4ce37f71c933bf827118c63c07774de98645d019
Certificate serial: 019D390991EDBC66EF89473A81C677F79CCF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TON_cckzv4JxGMY8B3dN6YZF0Bk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/efdfc9-da3a-46bd-8300-e1c8a4febdee/1/TON_cckzv4JxGMY8B3dN6YZF0Bk.mft
Manifest number: 1879
Signing time: Sun 29 Mar 2026 10:00:21 +0000
Manifest this update: Sun 29 Mar 2026 10:00:21 +0000
Manifest next update: Mon 30 Mar 2026 10:00:21 +0000
Files and hashes: 1: IFUzsftp1dffl9tnogc5GN2FPxg.roa (hash: c2nreEaxqTuATv8yMHczmqb0NFFqGvOhcZEByC2ZN9E=)
2: TON_cckzv4JxGMY8B3dN6YZF0Bk.crl (hash: XyYFhmvQgd0yzhzyee5Au/H5ehpL+RqTedEyJWtWJuk=)
3: vh2DQQ6ueJ_4GpQ58gbn9G7Sw6I.roa (hash: fy/ybQvpktclOxKkRMgTkW1YHsTAucNoQ+I2hQsP5r4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/81/efdfc9-da3a-46bd-8300-e1c8a4febdee/1/TON_cckzv4JxGMY8B3dN6YZF0Bk.crl
rsync://rpki.ripe.net/repository/DEFAULT/81/efdfc9-da3a-46bd-8300-e1c8a4febdee/1/TON_cckzv4JxGMY8B3dN6YZF0Bk.mft
rsync://rpki.ripe.net/repository/DEFAULT/TON_cckzv4JxGMY8B3dN6YZF0Bk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:09:91:ed:bc:66:ef:89:47:3a:81:c6:77:f7:9c:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4ce37f71c933bf827118c63c07774de98645d019
Validity
Not Before: Mar 29 10:00:21 2026 GMT
Not After : Mar 30 10:00:21 2026 GMT
Subject: CN=8b75698f99139ddec1fc88aad39bd46312b7d794
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:ca:3e:bd:58:b3:01:5e:f4:85:f2:66:02:d9:
7b:bf:14:fb:a7:d2:7e:b5:5a:24:74:16:8b:6a:18:
3d:8c:53:ac:8e:75:8b:aa:62:e7:3c:28:7c:3b:55:
6d:78:28:f9:09:fe:d4:dd:b4:65:0b:0e:0a:7c:e4:
ba:ae:71:a0:35:a9:0f:f0:21:cd:6b:2e:56:a3:d1:
cd:df:a7:81:b2:3a:6a:cd:00:6d:70:70:a0:65:43:
9f:b5:4e:3a:40:86:51:1c:e8:f7:db:bf:dc:ff:82:
47:c4:81:96:9c:c2:79:72:6d:2a:60:f3:01:7b:60:
d6:39:e9:3a:47:d0:72:52:d1:ca:33:e7:b6:47:d7:
b0:1f:2a:35:d3:25:68:87:96:69:79:cc:2a:2e:86:
d9:3f:5b:46:3c:ea:bc:84:6a:4a:dd:fc:14:e3:28:
ff:30:88:ff:5b:3c:a1:ab:4d:44:c4:f4:b2:b8:61:
da:c2:74:bf:04:1a:3e:56:98:a5:c8:be:78:c2:95:
4c:2a:a1:b7:89:6c:4b:3c:d0:13:30:b5:97:81:a7:
a8:cd:68:4c:a2:7c:e3:bc:4a:44:4f:1b:71:d4:89:
50:14:52:b2:97:82:bf:e3:43:c0:fe:d1:1e:30:41:
33:59:6f:c5:d2:e3:61:a3:23:38:48:65:33:4d:99:
c2:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:75:69:8F:99:13:9D:DE:C1:FC:88:AA:D3:9B:D4:63:12:B7:D7:94
X509v3 Authority Key Identifier:
keyid:4C:E3:7F:71:C9:33:BF:82:71:18:C6:3C:07:77:4D:E9:86:45:D0:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TON_cckzv4JxGMY8B3dN6YZF0Bk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/efdfc9-da3a-46bd-8300-e1c8a4febdee/1/TON_cckzv4JxGMY8B3dN6YZF0Bk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/efdfc9-da3a-46bd-8300-e1c8a4febdee/1/TON_cckzv4JxGMY8B3dN6YZF0Bk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:67:15:ad:a8:6e:58:02:de:ce:56:f4:83:81:28:5e:8f:91:
e0:36:78:d2:cc:df:61:8f:0e:3c:42:8b:e3:10:7d:ba:b7:e0:
bd:d0:ab:00:aa:d0:f3:7b:44:b4:80:cd:a4:c8:27:8d:b1:f2:
ad:a3:85:53:cc:b6:21:6d:1e:1f:98:76:45:39:f8:93:25:0f:
cd:78:67:78:60:5e:7b:83:fa:66:f1:e8:00:e5:47:60:aa:93:
f4:e3:55:64:a1:8e:13:fc:a2:9a:cb:0b:94:55:71:bd:f5:a7:
45:26:64:94:95:89:ea:7d:d0:b6:cc:0a:f8:a3:5b:2e:84:25:
40:7c:14:23:a2:3d:30:1e:52:6f:65:35:d6:26:d9:5f:15:e0:
9e:75:b2:47:62:f9:8f:90:2b:a3:5b:e4:4a:83:61:99:eb:ac:
57:49:66:5f:64:90:a5:75:d0:ed:f0:d0:15:5a:b1:1d:3c:cc:
fa:66:f3:ef:d7:97:89:54:01:14:ee:9d:31:c1:49:82:5a:3b:
55:84:d7:da:44:e7:8a:d4:67:c1:a9:d1:5d:58:74:f0:f3:6a:
d2:9c:68:9e:3c:3d:ff:c0:25:7b:2f:45:c7:77:0a:94:9c:70:
84:08:2f:3a:ee:f4:9b:9b:33:86:a3:34:85:86:66:fe:cf:fd:
95:85:2c:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 13:59:18 2026 by rpki-client