Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/686de6-b13c-4dac-aaae-d8fe2c085810/1/vFOA10K-8kI_z9bTA9c6Z5F6rsA.mft
File: vFOA10K-8kI_z9bTA9c6Z5F6rsA.mft (raw, json)
Hash identifier: 3vH0uNcJQMpYcieedXgJpaq4mdCsNDeoud1oSB7PvPE=
Subject key identifier: 7A:84:DF:26:37:33:CB:B0:C7:99:C9:F1:BB:86:25:47:88:2C:57:0E
Authority key identifier: BC:53:80:D7:42:BE:F2:42:3F:CF:D6:D3:03:D7:3A:67:91:7A:AE:C0
Certificate issuer: /CN=bc5380d742bef2423fcfd6d303d73a67917aaec0
Certificate serial: 019F921135CDE68D46BD0647A3A1CBF9DEDE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vFOA10K-8kI_z9bTA9c6Z5F6rsA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/686de6-b13c-4dac-aaae-d8fe2c085810/1/vFOA10K-8kI_z9bTA9c6Z5F6rsA.mft
Manifest number: 05C1
Signing time: Fri 24 Jul 2026 03:00:29 +0000
Manifest this update: Fri 24 Jul 2026 03:00:29 +0000
Manifest next update: Sat 25 Jul 2026 03:00:29 +0000
Files and hashes: 1: QcbxS7Mw8NbBuK9mNnK6HmsZQRw.roa (hash: w4kPZO+ZQt1G4XTx1vF54QBmA4+gouCZ4x1zUSlQXS4=)
2: vFOA10K-8kI_z9bTA9c6Z5F6rsA.crl (hash: kDUei7gQQBKNVXl3aMB7KDt8VTjYzwhgGe6/Ed2cBec=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/23/686de6-b13c-4dac-aaae-d8fe2c085810/1/vFOA10K-8kI_z9bTA9c6Z5F6rsA.crl
rsync://rpki.ripe.net/repository/DEFAULT/23/686de6-b13c-4dac-aaae-d8fe2c085810/1/vFOA10K-8kI_z9bTA9c6Z5F6rsA.mft
rsync://rpki.ripe.net/repository/DEFAULT/vFOA10K-8kI_z9bTA9c6Z5F6rsA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 03:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:92:11:35:cd:e6:8d:46:bd:06:47:a3:a1:cb:f9:de:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bc5380d742bef2423fcfd6d303d73a67917aaec0
Validity
Not Before: Jul 24 03:00:29 2026 GMT
Not After : Jul 25 03:00:29 2026 GMT
Subject: CN=7a84df263733cbb0c799c9f1bb862547882c570e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:29:38:56:05:0d:ba:c0:88:79:1f:12:e9:f1:
71:f0:95:a9:65:3e:df:05:03:0b:ee:79:6d:e4:64:
ab:15:f1:8f:09:28:e7:a2:6c:35:7f:b0:23:c8:a2:
89:1a:08:33:b7:b5:ad:52:02:4e:81:11:51:cb:c1:
48:e4:18:65:ef:e8:f5:2f:28:5d:fd:a5:22:02:db:
93:9f:23:e9:b3:b6:ba:53:cd:75:5b:4a:25:00:3b:
0d:df:dc:81:e5:52:ba:81:00:e7:14:6d:2d:a7:5b:
6a:72:30:ec:6f:42:12:1d:60:28:88:ff:31:18:60:
f6:fe:5e:3b:44:bd:b3:51:8d:5b:10:8e:a4:01:33:
f3:d6:aa:6e:df:b3:49:dd:a9:e2:b8:24:45:63:71:
3f:cc:f1:3c:28:6d:a5:3b:1e:27:d1:a9:8f:50:dc:
46:4b:7f:f4:46:b8:6a:a8:a0:b8:20:77:7d:62:70:
64:41:88:90:cc:2c:cc:59:45:54:d5:19:d7:a6:6d:
d5:b3:4e:5a:0c:44:98:f0:4f:9e:d4:e2:47:78:64:
1d:10:64:2d:a0:a9:de:2d:47:dc:7a:83:c9:2d:ad:
80:2a:c2:15:ff:27:97:91:b3:6a:8a:bc:a5:c8:b7:
7f:a9:30:e3:e1:c2:a3:94:fc:d3:31:7c:2c:85:84:
81:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:84:DF:26:37:33:CB:B0:C7:99:C9:F1:BB:86:25:47:88:2C:57:0E
X509v3 Authority Key Identifier:
keyid:BC:53:80:D7:42:BE:F2:42:3F:CF:D6:D3:03:D7:3A:67:91:7A:AE:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vFOA10K-8kI_z9bTA9c6Z5F6rsA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/686de6-b13c-4dac-aaae-d8fe2c085810/1/vFOA10K-8kI_z9bTA9c6Z5F6rsA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/23/686de6-b13c-4dac-aaae-d8fe2c085810/1/vFOA10K-8kI_z9bTA9c6Z5F6rsA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:39:f4:03:df:79:3e:1a:76:d6:34:d2:b0:e1:07:50:53:7e:
52:40:2b:f1:bf:d6:db:c5:85:c7:d1:96:32:f5:4c:33:3d:95:
11:f0:db:df:5f:57:e2:c8:9b:c2:3f:25:6f:56:05:b6:1f:39:
70:21:60:b8:15:54:69:22:38:d2:18:ff:22:7a:16:91:8b:36:
e0:08:c1:44:8d:e4:8d:57:56:68:02:37:95:71:69:c2:45:15:
cd:9c:42:27:28:82:d5:d3:41:51:99:0c:bd:8d:73:2d:64:ff:
0d:e9:28:91:77:e5:8b:d8:31:b4:7f:16:57:33:73:c1:b8:ca:
e0:96:99:1b:23:7b:db:87:0e:5d:f3:04:9e:de:4b:e1:a5:3b:
a9:26:12:97:9b:20:07:1a:4b:88:c8:de:9c:29:22:3b:08:78:
df:9d:17:69:4d:80:22:40:d5:12:db:b1:e7:70:11:6a:8e:8e:
53:0b:53:a8:bd:56:a4:b7:b2:8b:0d:78:aa:66:c0:58:20:f5:
d8:42:53:56:75:fa:25:9a:2a:ed:16:d7:61:af:4a:06:f2:ae:
dd:d9:64:c8:b4:64:e7:ce:39:c3:3d:b7:b7:a4:a2:ef:1f:73:
68:81:fe:f4:e3:1d:c1:38:70:81:ad:7b:16:3d:bc:ab:e8:5c:
8e:fe:46:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 10:03:44 2026 by rpki-client