Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/81/efdfc9-da3a-46bd-8300-e1c8a4febdee/1/TON_cckzv4JxGMY8B3dN6YZF0Bk.mft
File: TON_cckzv4JxGMY8B3dN6YZF0Bk.mft (raw, json)
Hash identifier: 8JbfxlO5ia7V80BDHfSNX+XMC/T7N7eGTn5gDX/8+xE=
Subject key identifier: C6:1F:8A:11:74:09:D4:2F:7B:CE:40:04:F4:B6:88:93:D4:7A:65:F4
Authority key identifier: 4C:E3:7F:71:C9:33:BF:82:71:18:C6:3C:07:77:4D:E9:86:45:D0:19
Certificate issuer: /CN=4ce37f71c933bf827118c63c07774de98645d019
Certificate serial: 01A180E2732604B77D0675C1C36D38610659
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TON_cckzv4JxGMY8B3dN6YZF0Bk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/efdfc9-da3a-46bd-8300-e1c8a4febdee/1/TON_cckzv4JxGMY8B3dN6YZF0Bk.mft
Manifest number: 1AB1
Signing time: Wed 28 Oct 2026 05:01:26 +0000
Manifest this update: Wed 28 Oct 2026 05:01:26 +0000
Manifest next update: Thu 29 Oct 2026 05:01:26 +0000
Files and hashes: 1: TON_cckzv4JxGMY8B3dN6YZF0Bk.crl (hash: 2Yo3aiYHrNJ27HwlBo9zOkp11TZUV8Lct6eKM1ezPRs=)
2: idEIE1LmH5aRSetRlRXeE-BvXJs.roa (hash: ojybS1RrhljTmMZjxgmXu+yk/QCNdpZiAYm9U0KCarc=)
3: vh2DQQ6ueJ_4GpQ58gbn9G7Sw6I.roa (hash: fy/ybQvpktclOxKkRMgTkW1YHsTAucNoQ+I2hQsP5r4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/81/efdfc9-da3a-46bd-8300-e1c8a4febdee/1/TON_cckzv4JxGMY8B3dN6YZF0Bk.crl
rsync://rpki.ripe.net/repository/DEFAULT/81/efdfc9-da3a-46bd-8300-e1c8a4febdee/1/TON_cckzv4JxGMY8B3dN6YZF0Bk.mft
rsync://rpki.ripe.net/repository/DEFAULT/TON_cckzv4JxGMY8B3dN6YZF0Bk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 29 Oct 2026 05:01:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:80:e2:73:26:04:b7:7d:06:75:c1:c3:6d:38:61:06:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4ce37f71c933bf827118c63c07774de98645d019
Validity
Not Before: Oct 28 05:01:26 2026 GMT
Not After : Oct 29 05:01:26 2026 GMT
Subject: CN=c61f8a117409d42f7bce4004f4b68893d47a65f4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:03:d5:4a:7a:81:65:85:6d:31:d3:fd:e3:34:
6a:ad:85:60:08:50:50:c2:07:15:41:98:66:ff:e9:
23:f1:82:d2:39:34:a4:90:a9:6b:0c:dc:ff:28:30:
4c:57:99:36:17:d1:5e:3a:d1:42:09:67:fc:70:31:
20:b4:b3:78:a4:81:f9:89:6a:e4:bc:dc:c1:02:a0:
3c:dd:1e:06:34:c0:cc:ed:3d:47:94:e0:8f:3d:fc:
97:11:cc:b9:1a:63:9d:fc:8c:60:12:96:b9:5a:9b:
c5:b1:d8:f2:11:89:ff:b5:9b:c6:ad:1a:b2:d2:02:
a1:25:c2:39:68:4a:43:de:5c:a0:2f:68:2e:d8:b4:
c8:37:39:b9:d4:8d:c6:6a:28:3c:e4:3e:5e:b1:52:
03:d3:c0:73:2d:3b:0d:1c:17:4c:aa:5b:f9:5c:55:
a1:15:63:fe:c5:77:8a:fc:6c:e7:8d:ae:72:7a:23:
43:15:d8:77:06:a4:d6:5b:2c:9e:06:67:3a:45:50:
be:cc:2d:81:06:87:e1:d9:dd:91:51:7c:01:8b:9f:
c3:c4:93:51:20:2e:d8:c1:5b:3a:f9:1b:8e:76:c0:
89:e6:5d:2e:1b:26:83:9d:73:80:f2:f6:a1:d1:8e:
5f:30:f2:47:89:a7:68:8d:c7:a1:51:f3:ac:01:10:
19:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:1F:8A:11:74:09:D4:2F:7B:CE:40:04:F4:B6:88:93:D4:7A:65:F4
X509v3 Authority Key Identifier:
keyid:4C:E3:7F:71:C9:33:BF:82:71:18:C6:3C:07:77:4D:E9:86:45:D0:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TON_cckzv4JxGMY8B3dN6YZF0Bk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/efdfc9-da3a-46bd-8300-e1c8a4febdee/1/TON_cckzv4JxGMY8B3dN6YZF0Bk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/efdfc9-da3a-46bd-8300-e1c8a4febdee/1/TON_cckzv4JxGMY8B3dN6YZF0Bk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:bf:84:14:a5:ec:e6:bc:75:e3:6b:0f:82:ba:ed:5d:2c:07:
29:29:90:00:0e:5a:cb:65:4f:a8:ec:c8:d8:0e:02:9e:2c:2d:
51:93:ff:aa:2a:9e:99:0d:85:f0:ba:ad:c9:47:44:b6:7a:1d:
c5:c4:5a:55:8d:f2:d2:ca:9a:98:bd:5d:9d:2e:e2:0a:46:87:
2d:71:26:8e:ee:45:68:d3:09:41:ca:42:d4:5a:03:77:b5:4c:
bc:63:8c:e4:bc:7d:60:35:74:20:ee:9b:ea:58:c8:e6:f1:d6:
91:b3:c7:68:c6:3c:db:c4:3a:e1:da:ff:37:49:a6:9b:33:77:
b4:b6:d8:10:6d:42:f2:62:bd:0f:ec:7b:7e:0a:95:93:0a:1e:
17:04:f9:ac:3d:fb:3e:6d:c7:5c:3a:ee:b0:11:b9:7e:95:7e:
cc:eb:f9:17:c7:51:be:a5:bf:83:c1:a7:e5:5f:e7:07:ad:64:
dc:d7:0f:75:92:41:d6:c7:e5:7d:34:43:29:0f:3a:3c:93:91:
bc:13:7a:f8:5a:f9:59:9b:2a:ec:64:b1:ea:0d:6c:03:9c:f2:
bf:0d:c9:39:a8:07:a4:79:0a:83:c6:d6:d4:6e:0e:a9:97:ab:
13:3d:d7:1b:a7:42:c3:a9:59:b9:1b:68:ea:3f:2b:3d:71:2b:
09:c9:49:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 28 13:07:30 2026 by rpki-client