Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/efdfc9-da3a-46bd-8300-e1c8a4febdee/1/TON_cckzv4JxGMY8B3dN6YZF0Bk.mft
File: TON_cckzv4JxGMY8B3dN6YZF0Bk.mft (raw, json)
Hash identifier: gK3wnYYW4FpEQ/coNKxYshw+9XCL4wklDX9SdirsO5w=
Subject key identifier: 23:8E:80:96:78:16:85:3E:F3:1A:BB:0F:6C:68:E6:34:AE:2C:AF:C8
Authority key identifier: 4C:E3:7F:71:C9:33:BF:82:71:18:C6:3C:07:77:4D:E9:86:45:D0:19
Certificate issuer: /CN=4ce37f71c933bf827118c63c07774de98645d019
Certificate serial: 019D27A8B85AAE03265D8A9E19BA45B47A56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TON_cckzv4JxGMY8B3dN6YZF0Bk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/efdfc9-da3a-46bd-8300-e1c8a4febdee/1/TON_cckzv4JxGMY8B3dN6YZF0Bk.mft
Manifest number: 1870
Signing time: Thu 26 Mar 2026 01:01:01 +0000
Manifest this update: Thu 26 Mar 2026 01:01:01 +0000
Manifest next update: Fri 27 Mar 2026 01:01:01 +0000
Files and hashes: 1: IFUzsftp1dffl9tnogc5GN2FPxg.roa (hash: c2nreEaxqTuATv8yMHczmqb0NFFqGvOhcZEByC2ZN9E=)
2: TON_cckzv4JxGMY8B3dN6YZF0Bk.crl (hash: uj6b6erAZp59IIouQxWBCE0n5hU5DoJMOu2CEkgVMGk=)
3: vh2DQQ6ueJ_4GpQ58gbn9G7Sw6I.roa (hash: fy/ybQvpktclOxKkRMgTkW1YHsTAucNoQ+I2hQsP5r4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/81/efdfc9-da3a-46bd-8300-e1c8a4febdee/1/TON_cckzv4JxGMY8B3dN6YZF0Bk.crl
rsync://rpki.ripe.net/repository/DEFAULT/81/efdfc9-da3a-46bd-8300-e1c8a4febdee/1/TON_cckzv4JxGMY8B3dN6YZF0Bk.mft
rsync://rpki.ripe.net/repository/DEFAULT/TON_cckzv4JxGMY8B3dN6YZF0Bk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:a8:b8:5a:ae:03:26:5d:8a:9e:19:ba:45:b4:7a:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4ce37f71c933bf827118c63c07774de98645d019
Validity
Not Before: Mar 26 01:01:01 2026 GMT
Not After : Mar 27 01:01:01 2026 GMT
Subject: CN=238e80967816853ef31abb0f6c68e634ae2cafc8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:56:3c:1a:c5:2d:82:52:71:88:68:17:21:46:
a8:5e:3c:95:74:36:4d:48:01:97:05:17:1c:2e:c4:
09:a0:68:ca:63:06:00:5e:59:ab:cb:f5:26:a3:63:
17:d8:c9:1a:00:4a:c8:90:b6:5b:86:4e:b4:23:a0:
95:47:e5:e4:91:41:d3:e8:20:1e:6b:06:77:25:15:
c4:22:5f:0d:7e:47:7d:2e:c8:8f:64:a4:87:99:4d:
d2:3c:f7:f0:ba:ef:2e:91:2e:7b:0e:25:39:54:f2:
a8:55:7f:bd:b4:7f:f9:39:c3:60:26:c8:53:76:bb:
9f:42:07:cd:94:b8:f7:70:3f:9a:03:04:ff:8c:6d:
d3:ca:df:bd:91:2d:b8:ea:b1:3d:42:e8:90:3f:34:
f6:f1:00:54:64:55:c2:90:c5:9c:01:60:d5:d7:47:
41:b0:a6:86:e0:2d:14:9f:df:7f:d0:9a:6e:1a:a4:
f9:27:7b:15:38:db:9c:a0:09:59:3d:19:46:13:3a:
1d:8c:aa:bf:63:64:b3:db:9a:13:ae:ee:58:05:a8:
35:54:af:0a:e9:cb:44:8f:b9:ba:85:cf:83:20:f4:
fb:f5:7d:d0:e3:48:87:8b:8b:b8:bb:15:d2:fb:bd:
62:86:31:3f:ca:5b:ee:c1:dd:92:c2:a4:a5:43:3e:
8e:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:8E:80:96:78:16:85:3E:F3:1A:BB:0F:6C:68:E6:34:AE:2C:AF:C8
X509v3 Authority Key Identifier:
keyid:4C:E3:7F:71:C9:33:BF:82:71:18:C6:3C:07:77:4D:E9:86:45:D0:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TON_cckzv4JxGMY8B3dN6YZF0Bk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/efdfc9-da3a-46bd-8300-e1c8a4febdee/1/TON_cckzv4JxGMY8B3dN6YZF0Bk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/efdfc9-da3a-46bd-8300-e1c8a4febdee/1/TON_cckzv4JxGMY8B3dN6YZF0Bk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:7d:13:86:fb:db:8b:bd:bc:c0:f8:3e:4f:c5:67:33:b7:73:
51:e4:ff:bc:89:96:23:f2:a5:1f:24:60:67:a0:cd:7d:99:ad:
ae:2e:df:b2:9d:3d:30:3b:e2:c1:6d:c0:db:1b:e2:1d:70:af:
a0:20:ed:e1:00:96:86:05:c3:8a:5e:15:e5:4f:39:73:a8:6f:
a4:d2:fb:9a:86:45:b7:de:70:b5:3e:9f:cc:61:95:c8:f9:f1:
b0:e6:9e:48:37:74:47:a3:56:89:68:07:9f:d1:9a:60:1c:a5:
f8:c2:7a:a0:36:8d:ab:d6:b1:f2:72:94:1b:27:6e:15:2e:ef:
00:83:87:d1:56:e5:84:06:54:9f:53:cd:1c:f0:35:48:35:40:
0a:28:c8:c5:fe:b1:85:51:0d:9f:6a:a2:97:a1:cc:6e:27:d7:
b5:c1:fd:a5:7d:8f:bb:cf:95:fc:d0:52:32:43:85:40:40:6b:
6d:5a:de:c2:9d:e7:07:d9:58:44:3d:4e:8a:2b:ef:89:37:e8:
6b:1f:81:10:df:4b:7a:45:fe:33:21:ff:31:4f:e0:0d:66:57:
3b:dd:e8:16:b8:f4:6a:69:3e:a1:07:81:96:8f:dd:2a:dc:fd:
38:0e:df:03:f9:9e:2c:48:8a:75:9d:08:fc:7a:fc:47:91:46:
d5:ba:5a:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 08:25:12 2026 by rpki-client