Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/81/efdfc9-da3a-46bd-8300-e1c8a4febdee/1/TON_cckzv4JxGMY8B3dN6YZF0Bk.mft
File: TON_cckzv4JxGMY8B3dN6YZF0Bk.mft (raw, json)
Hash identifier: ruCa3AWLvXHLsx0M1cdOV6E1KXs9Ne7IGtAHgpuRs8I=
Subject key identifier: 54:CD:76:37:52:A7:19:83:F4:E1:D2:B7:70:79:EA:7B:D9:00:39:17
Authority key identifier: 4C:E3:7F:71:C9:33:BF:82:71:18:C6:3C:07:77:4D:E9:86:45:D0:19
Certificate issuer: /CN=4ce37f71c933bf827118c63c07774de98645d019
Certificate serial: 01A0E3998EA5A93521354D17B00E0180077D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TON_cckzv4JxGMY8B3dN6YZF0Bk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/efdfc9-da3a-46bd-8300-e1c8a4febdee/1/TON_cckzv4JxGMY8B3dN6YZF0Bk.mft
Manifest number: 1A5F
Signing time: Sun 27 Sep 2026 16:01:26 +0000
Manifest this update: Sun 27 Sep 2026 16:01:26 +0000
Manifest next update: Mon 28 Sep 2026 16:01:26 +0000
Files and hashes: 1: IFUzsftp1dffl9tnogc5GN2FPxg.roa (hash: c2nreEaxqTuATv8yMHczmqb0NFFqGvOhcZEByC2ZN9E=)
2: TON_cckzv4JxGMY8B3dN6YZF0Bk.crl (hash: e32H9T47gbx0FNPpZy/ibaghr57K6c4BBik3mfv6YBE=)
3: vh2DQQ6ueJ_4GpQ58gbn9G7Sw6I.roa (hash: fy/ybQvpktclOxKkRMgTkW1YHsTAucNoQ+I2hQsP5r4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/81/efdfc9-da3a-46bd-8300-e1c8a4febdee/1/TON_cckzv4JxGMY8B3dN6YZF0Bk.crl
rsync://rpki.ripe.net/repository/DEFAULT/81/efdfc9-da3a-46bd-8300-e1c8a4febdee/1/TON_cckzv4JxGMY8B3dN6YZF0Bk.mft
rsync://rpki.ripe.net/repository/DEFAULT/TON_cckzv4JxGMY8B3dN6YZF0Bk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Sep 2026 14:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e3:99:8e:a5:a9:35:21:35:4d:17:b0:0e:01:80:07:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4ce37f71c933bf827118c63c07774de98645d019
Validity
Not Before: Sep 27 16:01:26 2026 GMT
Not After : Sep 28 16:01:26 2026 GMT
Subject: CN=54cd763752a71983f4e1d2b77079ea7bd9003917
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:1a:7b:66:b9:08:04:b0:ad:d0:71:c1:8d:e1:
56:22:73:c7:6a:17:fd:5d:31:e3:92:62:2a:01:60:
2d:5a:4a:53:48:e2:b7:38:41:c1:9d:62:4a:58:ab:
a7:81:0f:2d:e7:e8:5a:d8:df:02:92:ee:89:6a:cd:
f5:d1:f4:90:3e:be:cb:da:33:3a:41:ce:7d:02:79:
09:43:58:02:91:58:a4:9d:ca:12:9b:58:ff:0d:30:
94:83:0d:6f:ef:6d:fc:d6:25:75:a1:fa:e8:ce:8a:
8a:c3:6f:71:dc:45:01:82:f8:2d:01:f4:3f:22:24:
cc:0b:ef:60:b5:50:23:84:a7:e6:3c:26:a7:0f:07:
f6:bf:7c:17:7b:64:15:df:22:a5:1e:5f:41:f5:ed:
90:08:cc:46:6c:04:1a:81:82:84:15:9a:6f:ec:d8:
18:57:3b:df:ad:09:48:f1:08:a9:f6:06:f2:ca:a3:
89:50:8e:46:e6:50:92:e2:21:e5:2c:82:3b:92:79:
10:ef:d4:0b:ba:9b:bf:46:00:e1:7d:14:39:17:89:
36:2c:46:63:94:b4:e7:2e:26:50:ba:2a:75:16:2d:
30:2a:87:6a:e6:22:1c:8c:29:b0:56:96:ca:38:06:
c7:bf:7d:cd:a4:ae:8a:3d:ba:2c:8f:74:a3:1d:27:
a8:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:CD:76:37:52:A7:19:83:F4:E1:D2:B7:70:79:EA:7B:D9:00:39:17
X509v3 Authority Key Identifier:
keyid:4C:E3:7F:71:C9:33:BF:82:71:18:C6:3C:07:77:4D:E9:86:45:D0:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TON_cckzv4JxGMY8B3dN6YZF0Bk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/efdfc9-da3a-46bd-8300-e1c8a4febdee/1/TON_cckzv4JxGMY8B3dN6YZF0Bk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/efdfc9-da3a-46bd-8300-e1c8a4febdee/1/TON_cckzv4JxGMY8B3dN6YZF0Bk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:2b:69:d6:fc:1f:5a:ec:5d:b2:53:5d:f9:45:52:ae:ee:0e:
fc:81:53:25:80:c9:67:db:db:b3:83:b7:e9:81:e5:a0:a1:e9:
9f:8d:9f:64:e5:8b:b7:70:1f:a2:f3:40:77:4d:51:92:9f:65:
58:2b:57:62:77:7d:6e:6b:bb:f3:54:11:81:14:81:66:37:49:
e7:d8:16:82:d4:17:31:10:7d:2a:78:6a:cc:7b:be:ac:0f:1a:
1b:71:74:ba:58:5d:d3:9c:d1:ef:a7:01:7e:59:4c:d2:e9:92:
ce:16:d4:bb:a3:30:6c:19:cd:17:a3:33:1e:f1:87:9c:47:51:
6e:93:fb:0d:fb:9d:3e:00:1e:34:5b:91:de:cb:59:ba:f4:a6:
cc:56:ad:6d:c4:70:23:cc:9b:cb:da:b1:e9:cd:70:25:1f:61:
1d:af:d8:03:af:12:80:de:81:77:24:f0:77:a3:70:f5:22:ba:
ee:35:b2:29:b8:02:77:20:f4:ef:79:e9:b8:bf:ce:d4:24:d4:
ff:0a:c5:09:f2:16:b3:4d:23:4a:7c:49:7c:17:c1:ae:4c:da:
c2:04:34:16:90:4d:4b:4e:4e:8b:0a:fb:9e:24:ae:86:2d:8e:
a8:f9:cb:f8:32:38:04:36:33:4f:7a:f5:01:e7:d0:f8:5b:b0:
b6:b9:8b:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 23:46:32 2026 by rpki-client