Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/81/efdfc9-da3a-46bd-8300-e1c8a4febdee/1/TON_cckzv4JxGMY8B3dN6YZF0Bk.mft
File: TON_cckzv4JxGMY8B3dN6YZF0Bk.mft (raw, json)
Hash identifier: Y5+NkThkMQiRB9H0aOHyBvk4jhIIKmxF357Wk+VzhvA=
Subject key identifier: 5A:3E:F4:0E:05:98:0D:B0:12:2A:D2:1B:F4:C1:B5:7A:FF:82:B6:BE
Authority key identifier: 4C:E3:7F:71:C9:33:BF:82:71:18:C6:3C:07:77:4D:E9:86:45:D0:19
Certificate issuer: /CN=4ce37f71c933bf827118c63c07774de98645d019
Certificate serial: 01A0D8049219F30521DE8BE8D3EAD17D453F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TON_cckzv4JxGMY8B3dN6YZF0Bk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/efdfc9-da3a-46bd-8300-e1c8a4febdee/1/TON_cckzv4JxGMY8B3dN6YZF0Bk.mft
Manifest number: 1A59
Signing time: Fri 25 Sep 2026 10:02:53 +0000
Manifest this update: Fri 25 Sep 2026 10:02:53 +0000
Manifest next update: Sat 26 Sep 2026 10:02:53 +0000
Files and hashes: 1: IFUzsftp1dffl9tnogc5GN2FPxg.roa (hash: c2nreEaxqTuATv8yMHczmqb0NFFqGvOhcZEByC2ZN9E=)
2: TON_cckzv4JxGMY8B3dN6YZF0Bk.crl (hash: SMUq1O8v8Z7MKyukWV820YctvbipLr/aTCSstb949Fg=)
3: vh2DQQ6ueJ_4GpQ58gbn9G7Sw6I.roa (hash: fy/ybQvpktclOxKkRMgTkW1YHsTAucNoQ+I2hQsP5r4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/81/efdfc9-da3a-46bd-8300-e1c8a4febdee/1/TON_cckzv4JxGMY8B3dN6YZF0Bk.crl
rsync://rpki.ripe.net/repository/DEFAULT/81/efdfc9-da3a-46bd-8300-e1c8a4febdee/1/TON_cckzv4JxGMY8B3dN6YZF0Bk.mft
rsync://rpki.ripe.net/repository/DEFAULT/TON_cckzv4JxGMY8B3dN6YZF0Bk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 08:02:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d8:04:92:19:f3:05:21:de:8b:e8:d3:ea:d1:7d:45:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4ce37f71c933bf827118c63c07774de98645d019
Validity
Not Before: Sep 25 10:02:53 2026 GMT
Not After : Sep 26 10:02:53 2026 GMT
Subject: CN=5a3ef40e05980db0122ad21bf4c1b57aff82b6be
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:da:8c:58:9b:c9:c5:31:2b:67:69:71:6c:ea:
24:b7:2a:9f:40:c6:84:0a:21:ce:c9:32:89:d6:28:
a8:91:88:03:6a:18:0f:3b:b4:72:07:b7:1f:00:60:
be:05:5a:58:40:6f:ef:cc:19:38:4a:ce:fb:05:8f:
42:87:32:b8:a8:20:01:3b:69:5b:88:c0:a3:0b:0c:
34:04:1c:38:d1:dd:73:3d:dd:7f:01:da:25:92:f3:
79:72:7c:7b:8b:e6:5c:6f:71:1a:b2:da:3b:4b:a7:
ff:e4:c6:8f:52:f7:98:60:1a:58:69:ab:17:83:35:
4f:28:05:a6:ca:b1:40:62:c6:da:0e:46:16:95:dc:
42:a8:34:d1:8a:81:fd:0b:b9:2f:a4:59:a5:9a:fa:
bf:92:6d:d1:13:e2:91:f5:71:82:d3:26:91:35:84:
3d:ad:4a:23:aa:69:1d:de:47:66:49:43:5e:82:af:
4d:43:c8:de:68:fd:ba:ee:aa:92:11:87:cf:db:e0:
d8:70:14:ca:40:33:d6:d6:e0:9c:46:19:ca:63:a1:
d4:44:22:f7:9e:49:35:a2:33:9d:b7:b5:36:fd:0b:
dc:b9:56:c5:57:0b:65:94:08:41:29:41:76:d4:07:
56:27:c2:77:a1:91:0d:df:96:ef:38:c0:d2:75:f5:
3c:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:3E:F4:0E:05:98:0D:B0:12:2A:D2:1B:F4:C1:B5:7A:FF:82:B6:BE
X509v3 Authority Key Identifier:
keyid:4C:E3:7F:71:C9:33:BF:82:71:18:C6:3C:07:77:4D:E9:86:45:D0:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TON_cckzv4JxGMY8B3dN6YZF0Bk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/efdfc9-da3a-46bd-8300-e1c8a4febdee/1/TON_cckzv4JxGMY8B3dN6YZF0Bk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/efdfc9-da3a-46bd-8300-e1c8a4febdee/1/TON_cckzv4JxGMY8B3dN6YZF0Bk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:73:8f:58:c1:95:21:5d:a5:70:38:88:bc:24:4f:19:99:f8:
be:42:70:6f:6f:05:a2:a5:bb:a0:ad:4e:38:65:43:be:5c:34:
48:83:0f:e0:95:cd:ab:10:c3:73:78:a2:f2:33:ad:df:45:f4:
39:2a:a2:9e:b5:2e:30:f6:b5:f9:62:f4:a8:d4:75:16:e8:4a:
57:5f:bf:39:ad:1f:4e:d6:a4:90:64:1b:8d:a6:77:8f:07:a8:
4e:1f:cd:fe:38:ec:ee:91:32:d2:87:ee:ef:98:88:e4:73:a1:
99:fd:2c:c5:0e:20:fc:c8:98:8e:94:d1:50:46:a3:e7:94:c3:
d7:53:e2:40:69:08:db:0c:fb:4b:87:a0:a9:92:be:92:40:18:
84:7a:6a:aa:07:65:6f:f1:6d:8c:e2:36:8e:f7:12:2b:a4:0b:
41:12:9b:d9:ca:05:1c:98:82:2e:42:ce:f5:ad:7e:02:c3:b8:
fd:1e:5e:53:14:e3:e8:35:62:80:01:62:be:97:cd:00:b4:ad:
6d:03:34:8c:ae:5e:8d:ee:be:22:fb:e9:8d:e1:04:42:04:2b:
e8:16:57:b3:8a:0d:14:39:63:60:89:e9:63:18:a9:75:9e:56:
c4:b1:ca:80:16:31:c4:35:44:e8:bf:34:d9:dc:e5:1b:61:6b:
81:20:09:53
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDYBJIZ8wUh3ovo0+rRfUU/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRjZTM3ZjcxYzkzM2JmODI3MTE4YzYzYzA3Nzc0ZGU5ODY0
NWQwMTkwHhcNMjYwOTI1MTAwMjUzWhcNMjYwOTI2MTAwMjUzWjAzMTEwLwYDVQQD
Eyg1YTNlZjQwZTA1OTgwZGIwMTIyYWQyMWJmNGMxYjU3YWZmODJiNmJlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApdqMWJvJxTErZ2lxbOoktyqfQMaE
CiHOyTKJ1iiokYgDahgPO7RyB7cfAGC+BVpYQG/vzBk4Ss77BY9ChzK4qCABO2lb
iMCjCww0BBw40d1zPd1/AdolkvN5cnx7i+Zcb3Easto7S6f/5MaPUveYYBpYaasX
gzVPKAWmyrFAYsbaDkYWldxCqDTRioH9C7kvpFmlmvq/km3RE+KR9XGC0yaRNYQ9
rUojqmkd3kdmSUNegq9NQ8jeaP267qqSEYfP2+DYcBTKQDPW1uCcRhnKY6HURCL3
nkk1ojOdt7U2/QvcuVbFVwtllAhBKUF21AdWJ8J3oZEN35bvOMDSdfU8pwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFo+9A4FmA2wEirSG/TBtXr/gra+MB8GA1UdIwQY
MBaAFEzjf3HJM7+CcRjGPAd3TemGRdAZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVE9OX2Nja3p2NEp4R01ZOEIzZE42WVpGMEJrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MS9lZmRmYzktZGEzYS00NmJkLTgzMDAt
ZTFjOGE0ZmViZGVlLzEvVE9OX2Nja3p2NEp4R01ZOEIzZE42WVpGMEJrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84MS9lZmRmYzktZGEzYS00NmJkLTgzMDAtZTFjOGE0ZmViZGVl
LzEvVE9OX2Nja3p2NEp4R01ZOEIzZE42WVpGMEJrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIHOPWMGV
IV2lcDiIvCRPGZn4vkJwb28FoqW7oK1OOGVDvlw0SIMP4JXNqxDDc3ii8jOt30X0
OSqinrUuMPa1+WL0qNR1FuhKV1+/Oa0fTtakkGQbjaZ3jweoTh/N/jjs7pEy0ofu
75iI5HOhmf0sxQ4g/MiYjpTRUEaj55TD11PiQGkI2wz7S4egqZK+kkAYhHpqqgdl
b/FtjOI2jvcSK6QLQRKb2coFHJiCLkLO9a1+AsO4/R5eUxTj6DVigAFivpfNALSt
bQM0jK5eje6+IvvpjeEEQgQr6BZXs4oNFDljYInpYxipdZ5WxLHKgBYxxDVE6L80
2dzlG2FrgSAJUw==
-----END CERTIFICATE-----
Generated at Fri Sep 25 18:10:15 2026 by rpki-client