Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/efdfc9-da3a-46bd-8300-e1c8a4febdee/1/TON_cckzv4JxGMY8B3dN6YZF0Bk.mft
File: TON_cckzv4JxGMY8B3dN6YZF0Bk.mft (raw, json)
Hash identifier: O4dts2t/XJtrCPdVl6aUKSwn7piVsnReMNdPPzJhpwQ=
Subject key identifier: 94:50:B5:A1:F3:F4:2F:87:30:F0:76:8D:38:06:55:8B:5F:1A:C1:F1
Authority key identifier: 4C:E3:7F:71:C9:33:BF:82:71:18:C6:3C:07:77:4D:E9:86:45:D0:19
Certificate issuer: /CN=4ce37f71c933bf827118c63c07774de98645d019
Certificate serial: 019FA3056E79612B878DBBA8515C1DE1758B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TON_cckzv4JxGMY8B3dN6YZF0Bk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/efdfc9-da3a-46bd-8300-e1c8a4febdee/1/TON_cckzv4JxGMY8B3dN6YZF0Bk.mft
Manifest number: 19B9
Signing time: Mon 27 Jul 2026 10:01:09 +0000
Manifest this update: Mon 27 Jul 2026 10:01:09 +0000
Manifest next update: Tue 28 Jul 2026 10:01:09 +0000
Files and hashes: 1: IFUzsftp1dffl9tnogc5GN2FPxg.roa (hash: c2nreEaxqTuATv8yMHczmqb0NFFqGvOhcZEByC2ZN9E=)
2: TON_cckzv4JxGMY8B3dN6YZF0Bk.crl (hash: Amw+Cxu42dlU+892I2AaoZwmWmvQtSv2VEj13AO5YIA=)
3: vh2DQQ6ueJ_4GpQ58gbn9G7Sw6I.roa (hash: fy/ybQvpktclOxKkRMgTkW1YHsTAucNoQ+I2hQsP5r4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/81/efdfc9-da3a-46bd-8300-e1c8a4febdee/1/TON_cckzv4JxGMY8B3dN6YZF0Bk.crl
rsync://rpki.ripe.net/repository/DEFAULT/81/efdfc9-da3a-46bd-8300-e1c8a4febdee/1/TON_cckzv4JxGMY8B3dN6YZF0Bk.mft
rsync://rpki.ripe.net/repository/DEFAULT/TON_cckzv4JxGMY8B3dN6YZF0Bk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a3:05:6e:79:61:2b:87:8d:bb:a8:51:5c:1d:e1:75:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4ce37f71c933bf827118c63c07774de98645d019
Validity
Not Before: Jul 27 10:01:09 2026 GMT
Not After : Jul 28 10:01:09 2026 GMT
Subject: CN=9450b5a1f3f42f8730f0768d3806558b5f1ac1f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:3f:5c:7a:13:0c:1b:55:55:5f:dd:16:67:1a:
92:f5:89:e7:e9:ef:65:a1:18:4e:68:14:d7:53:8d:
fb:c1:1d:93:5f:95:5e:32:2d:98:bf:d4:2e:56:4f:
84:60:b7:e6:d2:b6:44:ff:d8:01:e3:0c:7d:ae:9b:
75:ff:23:63:7b:6c:58:7a:fb:12:f8:14:e5:04:54:
ed:3e:b8:be:2a:18:a8:f8:d7:aa:e6:4d:26:1c:38:
b4:11:af:ab:39:46:74:80:9e:6d:e4:a6:e7:7b:c3:
20:25:62:b1:98:67:f9:70:82:11:45:99:81:91:26:
4f:6e:30:38:2c:f9:b4:38:ce:bf:e8:35:b3:1e:cf:
2f:42:dd:63:a8:3b:3b:42:c2:f5:31:59:55:24:c2:
57:07:a6:b1:2d:80:f6:e2:6c:ab:5f:d1:f4:e0:8d:
48:19:e7:c3:34:50:e8:d1:5d:63:61:0b:df:7e:91:
fb:e8:1f:07:9f:96:1c:c2:7e:2d:59:fa:7e:fa:2f:
22:76:87:60:89:5a:f0:93:e7:26:2c:db:de:3d:d1:
4c:1e:8f:4b:10:20:15:af:c5:ee:58:d6:06:58:22:
14:b7:50:f0:7d:92:72:cb:24:7e:a9:e4:12:bf:3b:
44:b7:2e:29:9c:98:70:6e:fe:16:ac:a4:8d:bc:9c:
3c:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:50:B5:A1:F3:F4:2F:87:30:F0:76:8D:38:06:55:8B:5F:1A:C1:F1
X509v3 Authority Key Identifier:
keyid:4C:E3:7F:71:C9:33:BF:82:71:18:C6:3C:07:77:4D:E9:86:45:D0:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TON_cckzv4JxGMY8B3dN6YZF0Bk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/efdfc9-da3a-46bd-8300-e1c8a4febdee/1/TON_cckzv4JxGMY8B3dN6YZF0Bk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/efdfc9-da3a-46bd-8300-e1c8a4febdee/1/TON_cckzv4JxGMY8B3dN6YZF0Bk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:d6:0e:65:90:c0:df:3f:f3:aa:42:ca:51:70:93:40:94:16:
84:46:ef:b1:b1:df:97:23:25:bf:c5:ed:3d:cc:71:59:ae:e3:
57:8f:76:ea:91:45:f1:e6:61:53:8c:f0:ab:27:52:bc:39:e9:
67:2d:6b:45:86:47:8e:9b:c1:ec:b7:23:e5:22:a6:9f:58:45:
85:1b:21:05:d2:01:92:4d:7a:49:d5:58:83:24:8e:35:ac:1e:
5c:96:28:09:0f:d7:98:04:f6:a8:b3:43:2e:7a:95:e5:8e:2a:
5b:2e:4a:7b:19:6d:ce:50:c4:fd:a4:47:ec:e9:aa:db:72:56:
a2:dd:86:7d:b8:d8:46:75:92:0f:1e:b3:e6:3e:a2:82:c3:b6:
e1:15:6d:a4:74:41:58:51:af:cf:e4:93:9c:9a:6f:97:42:d1:
74:f3:26:fd:ce:4c:e0:ba:5a:60:a1:21:13:23:85:c2:10:91:
b3:93:e7:5d:b7:91:a5:be:53:68:ef:07:e0:5c:df:3c:27:17:
a0:87:6e:8c:c2:4a:92:5a:44:77:7e:27:ef:f1:ef:ce:b2:d1:
9a:2f:2b:53:04:eb:3b:b4:df:f8:4a:e4:48:22:c6:e1:2f:44:
c4:49:c3:4b:ea:49:a5:ad:6d:e9:f2:c0:c2:8b:41:20:d2:1f:
e9:e6:6f:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 12:44:42 2026 by rpki-client