Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/efdfc9-da3a-46bd-8300-e1c8a4febdee/1/TON_cckzv4JxGMY8B3dN6YZF0Bk.mft
File: TON_cckzv4JxGMY8B3dN6YZF0Bk.mft (raw, json)
Hash identifier: egELYW2xj4rkSBlti8UsoYOAZrS5DrFEosnoaKfGLeg=
Subject key identifier: 68:8B:E0:BA:55:BA:19:A9:15:66:5C:50:76:4A:E6:A1:F8:7C:32:24
Authority key identifier: 4C:E3:7F:71:C9:33:BF:82:71:18:C6:3C:07:77:4D:E9:86:45:D0:19
Certificate issuer: /CN=4ce37f71c933bf827118c63c07774de98645d019
Certificate serial: 019F939241010A1A2C79D7121D0DCD29D2D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TON_cckzv4JxGMY8B3dN6YZF0Bk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/efdfc9-da3a-46bd-8300-e1c8a4febdee/1/TON_cckzv4JxGMY8B3dN6YZF0Bk.mft
Manifest number: 19B1
Signing time: Fri 24 Jul 2026 10:01:03 +0000
Manifest this update: Fri 24 Jul 2026 10:01:03 +0000
Manifest next update: Sat 25 Jul 2026 10:01:03 +0000
Files and hashes: 1: IFUzsftp1dffl9tnogc5GN2FPxg.roa (hash: c2nreEaxqTuATv8yMHczmqb0NFFqGvOhcZEByC2ZN9E=)
2: TON_cckzv4JxGMY8B3dN6YZF0Bk.crl (hash: cr3OjREBqR2aJtw5oVf+QgfBNFpKn3f7x9ymS+Ln7q4=)
3: vh2DQQ6ueJ_4GpQ58gbn9G7Sw6I.roa (hash: fy/ybQvpktclOxKkRMgTkW1YHsTAucNoQ+I2hQsP5r4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/81/efdfc9-da3a-46bd-8300-e1c8a4febdee/1/TON_cckzv4JxGMY8B3dN6YZF0Bk.crl
rsync://rpki.ripe.net/repository/DEFAULT/81/efdfc9-da3a-46bd-8300-e1c8a4febdee/1/TON_cckzv4JxGMY8B3dN6YZF0Bk.mft
rsync://rpki.ripe.net/repository/DEFAULT/TON_cckzv4JxGMY8B3dN6YZF0Bk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:93:92:41:01:0a:1a:2c:79:d7:12:1d:0d:cd:29:d2:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4ce37f71c933bf827118c63c07774de98645d019
Validity
Not Before: Jul 24 10:01:03 2026 GMT
Not After : Jul 25 10:01:03 2026 GMT
Subject: CN=688be0ba55ba19a915665c50764ae6a1f87c3224
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:39:2b:3e:0b:8e:5d:2e:91:9c:05:e2:e9:f4:
cf:c7:e6:c1:d2:10:4a:61:30:55:fd:bf:30:14:3b:
3d:15:47:eb:21:4c:fc:a1:61:e9:bc:7a:66:a8:ea:
c6:09:0f:b4:31:81:05:78:3b:ba:94:51:c4:e4:bd:
21:1f:9c:69:b0:bb:81:53:5d:00:b2:b7:ab:be:24:
40:14:c0:6d:58:1c:bb:76:7d:86:36:f7:de:95:f4:
ca:ba:9a:f0:b1:8a:82:48:92:eb:80:10:a0:87:dd:
1b:e2:27:31:86:57:ed:ca:92:8a:f2:49:f1:ba:2e:
57:0b:2b:43:d7:40:36:a1:81:48:b0:43:87:e9:5a:
7a:61:62:69:64:58:4b:c4:36:fe:1e:c7:6e:9c:b6:
71:6a:48:44:29:f2:c0:9c:32:a2:1b:ea:cd:aa:b3:
3f:73:76:1c:eb:e1:0a:15:92:1c:64:37:8e:b6:ba:
f2:13:c7:19:aa:cf:7d:82:8d:3b:9c:da:49:c9:04:
3e:da:fd:f3:fb:bf:96:94:f7:3f:ff:bb:78:73:58:
95:0c:6e:89:0b:e6:96:84:ea:bc:dd:3a:20:00:54:
c0:d3:09:b5:84:38:75:ab:3c:da:71:cb:e9:3b:75:
fb:91:b6:b8:ce:3a:63:95:ec:6a:fe:6d:29:f9:9c:
7f:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:8B:E0:BA:55:BA:19:A9:15:66:5C:50:76:4A:E6:A1:F8:7C:32:24
X509v3 Authority Key Identifier:
keyid:4C:E3:7F:71:C9:33:BF:82:71:18:C6:3C:07:77:4D:E9:86:45:D0:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TON_cckzv4JxGMY8B3dN6YZF0Bk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/efdfc9-da3a-46bd-8300-e1c8a4febdee/1/TON_cckzv4JxGMY8B3dN6YZF0Bk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/efdfc9-da3a-46bd-8300-e1c8a4febdee/1/TON_cckzv4JxGMY8B3dN6YZF0Bk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:5f:d8:6f:ef:a4:dc:97:8f:2d:6b:06:8c:2d:07:0e:0d:c1:
9a:1f:d0:92:36:ba:e8:3c:1a:38:9b:4f:a0:4a:d9:69:bf:e6:
ef:1b:be:65:3c:fe:d4:72:4f:42:af:f0:72:37:5b:66:a3:f8:
62:c4:c1:df:b7:b7:51:82:b3:eb:b4:a5:ef:19:f0:fe:c5:3b:
76:f4:e8:d0:39:bd:b1:9f:f8:0d:e8:57:ac:5f:3c:da:ce:c8:
db:f4:0c:8a:44:b6:74:f1:bc:20:18:28:d1:de:e3:20:f7:e1:
d9:7a:e7:b3:eb:18:94:60:43:c1:ce:c0:f2:ec:3a:00:36:0e:
e2:a3:f6:f5:59:7b:65:ad:7a:61:12:63:bd:9b:53:15:96:6b:
00:1f:9f:75:c0:c6:e1:3a:74:81:fa:f5:6a:45:27:0b:8a:4d:
73:b5:fe:a2:19:81:f7:05:86:ed:7d:31:2b:0d:bd:e2:2e:dd:
0d:0a:1f:c8:eb:8d:34:de:68:fd:84:78:44:5f:f4:eb:6a:31:
8d:95:e0:52:fd:37:03:a4:37:b4:31:68:87:22:1d:9c:19:b2:
24:fa:c3:c2:62:5e:58:4e:85:de:a5:11:7e:19:6c:32:57:d4:
07:9f:91:1c:32:ce:e2:80:bd:b3:d4:9b:34:06:74:59:eb:b5:
1f:b4:72:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 12:05:40 2026 by rpki-client