Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/efdfc9-da3a-46bd-8300-e1c8a4febdee/1/TON_cckzv4JxGMY8B3dN6YZF0Bk.mft
File: TON_cckzv4JxGMY8B3dN6YZF0Bk.mft (raw, json)
Hash identifier: 56FePEdN2GdtSc3/3VCEuIhIxCncf52TLhddXGZRH3U=
Subject key identifier: F1:3B:EB:0E:5C:30:8D:46:35:DB:23:9D:D7:02:41:E1:0B:DC:4E:33
Authority key identifier: 4C:E3:7F:71:C9:33:BF:82:71:18:C6:3C:07:77:4D:E9:86:45:D0:19
Certificate issuer: /CN=4ce37f71c933bf827118c63c07774de98645d019
Certificate serial: 019E1CEC1052AB57B3EF7B0B75B2F0491A68
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TON_cckzv4JxGMY8B3dN6YZF0Bk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/efdfc9-da3a-46bd-8300-e1c8a4febdee/1/TON_cckzv4JxGMY8B3dN6YZF0Bk.mft
Manifest number: 18EF
Signing time: Tue 12 May 2026 16:01:33 +0000
Manifest this update: Tue 12 May 2026 16:01:33 +0000
Manifest next update: Wed 13 May 2026 16:01:33 +0000
Files and hashes: 1: IFUzsftp1dffl9tnogc5GN2FPxg.roa (hash: c2nreEaxqTuATv8yMHczmqb0NFFqGvOhcZEByC2ZN9E=)
2: TON_cckzv4JxGMY8B3dN6YZF0Bk.crl (hash: HkptSbbVftVpkDt/rX34laZB3nIkRuhQ79ZGuYWAKn0=)
3: vh2DQQ6ueJ_4GpQ58gbn9G7Sw6I.roa (hash: fy/ybQvpktclOxKkRMgTkW1YHsTAucNoQ+I2hQsP5r4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/81/efdfc9-da3a-46bd-8300-e1c8a4febdee/1/TON_cckzv4JxGMY8B3dN6YZF0Bk.crl
rsync://rpki.ripe.net/repository/DEFAULT/81/efdfc9-da3a-46bd-8300-e1c8a4febdee/1/TON_cckzv4JxGMY8B3dN6YZF0Bk.mft
rsync://rpki.ripe.net/repository/DEFAULT/TON_cckzv4JxGMY8B3dN6YZF0Bk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1c:ec:10:52:ab:57:b3:ef:7b:0b:75:b2:f0:49:1a:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4ce37f71c933bf827118c63c07774de98645d019
Validity
Not Before: May 12 16:01:33 2026 GMT
Not After : May 13 16:01:33 2026 GMT
Subject: CN=f13beb0e5c308d4635db239dd70241e10bdc4e33
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:f8:de:4a:31:f9:9b:95:cd:d9:a6:f5:32:f7:
a0:77:c7:63:7f:7f:48:7a:d9:45:dd:4e:ec:4d:a5:
b7:08:88:86:10:b4:5f:dc:e1:65:7a:b7:cd:d4:61:
29:6a:2c:8d:2a:cb:fb:17:65:37:fb:13:49:bf:60:
76:41:a7:b4:10:d5:72:2a:79:8d:62:55:12:d0:42:
45:0f:26:8c:d7:52:7b:d6:3e:b4:90:f1:58:43:dc:
0a:0e:5d:de:c2:f4:62:41:d2:a4:02:33:11:dc:9a:
d1:5c:9c:aa:6a:86:ba:0a:df:4b:09:a2:48:6e:91:
37:6c:8a:84:9a:2d:37:62:51:ac:44:9a:18:c5:05:
bb:15:af:98:8f:6d:87:57:4f:1c:c5:f2:bc:32:6d:
b9:68:c4:33:8e:e1:95:9b:10:c9:e0:2a:3c:e5:0b:
0d:c7:b9:72:59:fb:73:18:17:75:fb:2a:54:dc:d9:
ce:3d:53:e9:67:3a:9c:e8:fb:5e:aa:55:03:29:46:
01:12:3e:7a:4b:89:b6:73:51:b3:7b:eb:e8:d8:90:
ab:f7:5c:c6:8d:8d:c2:a6:dd:54:a6:93:b5:4c:f2:
48:ae:0d:74:e2:4e:4e:91:95:ab:9d:62:9b:15:54:
f0:cb:50:49:48:7b:10:7b:21:b9:e3:cc:ad:25:c5:
bf:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:3B:EB:0E:5C:30:8D:46:35:DB:23:9D:D7:02:41:E1:0B:DC:4E:33
X509v3 Authority Key Identifier:
keyid:4C:E3:7F:71:C9:33:BF:82:71:18:C6:3C:07:77:4D:E9:86:45:D0:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TON_cckzv4JxGMY8B3dN6YZF0Bk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/efdfc9-da3a-46bd-8300-e1c8a4febdee/1/TON_cckzv4JxGMY8B3dN6YZF0Bk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/efdfc9-da3a-46bd-8300-e1c8a4febdee/1/TON_cckzv4JxGMY8B3dN6YZF0Bk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:17:dc:a3:e8:5a:6a:c6:35:56:35:ba:7c:00:99:be:7d:36:
cb:a8:55:ae:bb:f3:e9:ed:e8:8a:21:e5:2b:1d:a7:d8:72:0a:
fe:5f:57:45:4f:58:0f:ae:dd:7a:18:02:fe:70:c4:ae:30:f5:
59:ff:24:3d:a2:03:b8:94:fb:ba:e4:58:6f:03:a5:d0:b2:2a:
ea:c1:35:4c:f1:a8:19:fd:61:2f:0c:f1:39:90:14:75:ed:08:
83:cf:7b:7b:ca:4c:0c:2b:9b:36:58:38:df:44:24:9c:4b:73:
ed:b8:fc:cc:e8:13:22:9e:60:85:d7:58:dc:3e:6a:96:df:a8:
86:8d:7a:ef:9a:a5:7e:18:e5:cc:a4:8a:89:3c:ac:f4:a7:27:
2b:1c:d0:09:17:87:c4:32:78:05:3e:69:60:20:da:21:20:57:
c4:3e:a9:12:71:fb:21:59:06:c1:1a:65:06:02:f6:00:3b:6f:
1b:52:b4:03:96:e3:41:99:99:cf:20:aa:ea:15:ab:ff:42:9d:
74:f1:60:26:de:b1:1a:7a:94:82:93:71:3d:13:62:aa:f6:3a:
76:9e:ff:24:cf:2e:4b:7d:ba:43:4e:80:11:ce:5d:36:c0:fc:
87:ca:4a:bc:75:38:56:ac:e3:ff:65:26:8d:23:db:74:e0:3d:
0e:1d:83:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 22:44:11 2026 by rpki-client