Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/81/efdfc9-da3a-46bd-8300-e1c8a4febdee/1/TON_cckzv4JxGMY8B3dN6YZF0Bk.mft
File: TON_cckzv4JxGMY8B3dN6YZF0Bk.mft (raw, json)
Hash identifier: AFas1x+2BT4c70fho1cI8HuWov6A+vR3CmD7xgj8SDo=
Subject key identifier: C6:BA:20:5E:04:59:84:94:A4:63:E0:9D:BA:52:97:3E:D1:D8:4D:5E
Authority key identifier: 4C:E3:7F:71:C9:33:BF:82:71:18:C6:3C:07:77:4D:E9:86:45:D0:19
Certificate issuer: /CN=4ce37f71c933bf827118c63c07774de98645d019
Certificate serial: 01A08AC3518EFEA43EAC27599AB463F5FE83
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TON_cckzv4JxGMY8B3dN6YZF0Bk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/efdfc9-da3a-46bd-8300-e1c8a4febdee/1/TON_cckzv4JxGMY8B3dN6YZF0Bk.mft
Manifest number: 1A31
Signing time: Thu 10 Sep 2026 10:00:51 +0000
Manifest this update: Thu 10 Sep 2026 10:00:51 +0000
Manifest next update: Fri 11 Sep 2026 10:00:51 +0000
Files and hashes: 1: IFUzsftp1dffl9tnogc5GN2FPxg.roa (hash: c2nreEaxqTuATv8yMHczmqb0NFFqGvOhcZEByC2ZN9E=)
2: TON_cckzv4JxGMY8B3dN6YZF0Bk.crl (hash: mWVZbUffWj9E9C+GarLjRnrmk1lB5VrhJKKnnANLCws=)
3: vh2DQQ6ueJ_4GpQ58gbn9G7Sw6I.roa (hash: fy/ybQvpktclOxKkRMgTkW1YHsTAucNoQ+I2hQsP5r4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/81/efdfc9-da3a-46bd-8300-e1c8a4febdee/1/TON_cckzv4JxGMY8B3dN6YZF0Bk.crl
rsync://rpki.ripe.net/repository/DEFAULT/81/efdfc9-da3a-46bd-8300-e1c8a4febdee/1/TON_cckzv4JxGMY8B3dN6YZF0Bk.mft
rsync://rpki.ripe.net/repository/DEFAULT/TON_cckzv4JxGMY8B3dN6YZF0Bk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 10:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8a:c3:51:8e:fe:a4:3e:ac:27:59:9a:b4:63:f5:fe:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4ce37f71c933bf827118c63c07774de98645d019
Validity
Not Before: Sep 10 10:00:51 2026 GMT
Not After : Sep 11 10:00:51 2026 GMT
Subject: CN=c6ba205e04598494a463e09dba52973ed1d84d5e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:04:d7:2a:39:d3:42:af:01:2e:ea:42:0e:e6:
c0:e4:e1:1c:80:e0:13:7d:9c:ab:d5:58:2d:67:97:
1d:ee:a7:ac:bc:b6:7f:1f:1f:88:e0:2f:2a:6d:7c:
4d:ec:9f:be:e1:ee:25:6c:43:1a:02:c8:fa:18:d2:
4d:e9:90:64:49:41:7b:f4:d9:6f:dd:be:15:68:2d:
fc:60:1a:57:9e:65:4c:f4:e7:1e:71:5b:b2:f0:22:
1f:4c:0d:a5:84:01:58:bf:55:b8:40:d3:af:9d:78:
72:e7:80:a3:59:67:7c:62:6c:6e:af:a5:75:ea:80:
06:f4:76:e4:be:73:dd:e6:9b:19:cb:a9:5b:68:5f:
01:a0:3f:b6:52:e6:35:38:34:49:f5:5b:ef:00:b0:
55:cb:09:4b:20:71:06:65:22:a5:72:4c:37:dd:2e:
5c:dc:51:11:5b:be:ec:e3:ce:3d:4d:2e:a6:aa:35:
4a:76:be:c9:e1:48:3d:bc:96:9e:93:a9:da:af:fa:
41:52:96:9d:5f:e7:a8:4b:e9:a7:a3:19:82:60:55:
79:5d:fd:0e:cb:57:bc:9f:e5:a3:4e:4e:be:f2:8b:
15:4c:4a:23:0c:e8:af:b8:2a:62:17:e1:eb:3a:4e:
bd:84:19:31:6b:ca:b8:9f:6f:56:7c:54:12:4c:75:
40:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:BA:20:5E:04:59:84:94:A4:63:E0:9D:BA:52:97:3E:D1:D8:4D:5E
X509v3 Authority Key Identifier:
keyid:4C:E3:7F:71:C9:33:BF:82:71:18:C6:3C:07:77:4D:E9:86:45:D0:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TON_cckzv4JxGMY8B3dN6YZF0Bk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/efdfc9-da3a-46bd-8300-e1c8a4febdee/1/TON_cckzv4JxGMY8B3dN6YZF0Bk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/efdfc9-da3a-46bd-8300-e1c8a4febdee/1/TON_cckzv4JxGMY8B3dN6YZF0Bk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:2b:72:d0:0b:95:a6:a2:81:4d:31:96:54:0c:31:ce:3b:6f:
77:22:bb:a2:75:53:4c:7b:ff:39:bb:7c:1f:30:0d:2c:ec:86:
a3:04:32:b6:17:13:df:d1:29:83:86:cc:56:15:a1:de:4f:55:
10:b6:2e:12:9b:c4:66:e6:81:00:d7:8f:40:71:f0:48:81:d8:
62:b4:63:6f:2f:36:1a:a8:44:1d:28:c6:23:cb:39:02:39:34:
d6:2c:b5:21:35:d9:89:9c:47:92:dc:cc:b3:03:24:d9:67:c3:
ad:91:ce:98:96:80:b0:c1:a3:e5:13:62:dd:ec:ec:eb:13:ff:
90:1e:e8:45:bd:67:b1:1d:09:4c:30:07:e4:74:a9:a0:85:f0:
bb:32:23:e7:6f:26:05:fe:7e:d3:5e:e8:96:03:27:34:2c:d3:
f0:54:f9:6e:6e:e4:a3:8d:cb:43:34:b8:97:8c:eb:41:0b:1e:
c3:24:5c:7d:4d:a3:86:83:32:73:52:07:8b:67:69:7e:b6:0c:
e5:0c:a7:52:48:92:6a:27:ea:db:b8:d5:f3:c5:7e:9f:d6:cd:
a6:a2:24:9a:ab:ed:7c:92:11:12:78:ce:68:1b:54:be:20:49:
52:1d:58:2c:8e:63:f5:76:6c:f7:63:c0:d2:b9:c3:a6:a3:da:
fa:1c:15:ae
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaCKw1GO/qQ+rCdZmrRj9f6DMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRjZTM3ZjcxYzkzM2JmODI3MTE4YzYzYzA3Nzc0ZGU5ODY0
NWQwMTkwHhcNMjYwOTEwMTAwMDUxWhcNMjYwOTExMTAwMDUxWjAzMTEwLwYDVQQD
EyhjNmJhMjA1ZTA0NTk4NDk0YTQ2M2UwOWRiYTUyOTczZWQxZDg0ZDVlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnATXKjnTQq8BLupCDubA5OEcgOAT
fZyr1VgtZ5cd7qesvLZ/Hx+I4C8qbXxN7J++4e4lbEMaAsj6GNJN6ZBkSUF79Nlv
3b4VaC38YBpXnmVM9OcecVuy8CIfTA2lhAFYv1W4QNOvnXhy54CjWWd8Ymxur6V1
6oAG9HbkvnPd5psZy6lbaF8BoD+2UuY1ODRJ9VvvALBVywlLIHEGZSKlckw33S5c
3FERW77s4849TS6mqjVKdr7J4Ug9vJaek6nar/pBUpadX+eoS+mnoxmCYFV5Xf0O
y1e8n+WjTk6+8osVTEojDOivuCpiF+HrOk69hBkxa8q4n29WfFQSTHVAkQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMa6IF4EWYSUpGPgnbpSlz7R2E1eMB8GA1UdIwQY
MBaAFEzjf3HJM7+CcRjGPAd3TemGRdAZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVE9OX2Nja3p2NEp4R01ZOEIzZE42WVpGMEJrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MS9lZmRmYzktZGEzYS00NmJkLTgzMDAt
ZTFjOGE0ZmViZGVlLzEvVE9OX2Nja3p2NEp4R01ZOEIzZE42WVpGMEJrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84MS9lZmRmYzktZGEzYS00NmJkLTgzMDAtZTFjOGE0ZmViZGVl
LzEvVE9OX2Nja3p2NEp4R01ZOEIzZE42WVpGMEJrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARCty0AuV
pqKBTTGWVAwxzjtvdyK7onVTTHv/Obt8HzANLOyGowQythcT39Epg4bMVhWh3k9V
ELYuEpvEZuaBANePQHHwSIHYYrRjby82GqhEHSjGI8s5Ajk01iy1ITXZiZxHktzM
swMk2WfDrZHOmJaAsMGj5RNi3ezs6xP/kB7oRb1nsR0JTDAH5HSpoIXwuzIj528m
Bf5+017olgMnNCzT8FT5bm7ko43LQzS4l4zrQQsewyRcfU2jhoMyc1IHi2dpfrYM
5QynUkiSaifq27jV88V+n9bNpqIkmqvtfJIREnjOaBtUviBJUh1YLI5j9XZs92PA
0rnDpqPa+hwVrg==
-----END CERTIFICATE-----
Generated at Thu Sep 10 20:23:35 2026 by rpki-client