Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/686de6-b13c-4dac-aaae-d8fe2c085810/1/vFOA10K-8kI_z9bTA9c6Z5F6rsA.mft
File: vFOA10K-8kI_z9bTA9c6Z5F6rsA.mft (raw, json)
Hash identifier: pYxJxrpMBN0KqBexZv5yKmLeAKa6sDNnWwL6M1C/1Fw=
Subject key identifier: 9A:D7:39:64:59:D9:60:45:46:29:94:56:96:2B:61:35:5D:B9:D0:06
Authority key identifier: BC:53:80:D7:42:BE:F2:42:3F:CF:D6:D3:03:D7:3A:67:91:7A:AE:C0
Certificate issuer: /CN=bc5380d742bef2423fcfd6d303d73a67917aaec0
Certificate serial: 019D2816D6D05ED0D4245534EB87C1A83920
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vFOA10K-8kI_z9bTA9c6Z5F6rsA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/686de6-b13c-4dac-aaae-d8fe2c085810/1/vFOA10K-8kI_z9bTA9c6Z5F6rsA.mft
Manifest number: 0481
Signing time: Thu 26 Mar 2026 03:01:18 +0000
Manifest this update: Thu 26 Mar 2026 03:01:18 +0000
Manifest next update: Fri 27 Mar 2026 03:01:18 +0000
Files and hashes: 1: QcbxS7Mw8NbBuK9mNnK6HmsZQRw.roa (hash: w4kPZO+ZQt1G4XTx1vF54QBmA4+gouCZ4x1zUSlQXS4=)
2: vFOA10K-8kI_z9bTA9c6Z5F6rsA.crl (hash: I+vRrPhw4gqZRliYNPArA9CPpgCouUsQNYFMbmUQtBk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/23/686de6-b13c-4dac-aaae-d8fe2c085810/1/vFOA10K-8kI_z9bTA9c6Z5F6rsA.crl
rsync://rpki.ripe.net/repository/DEFAULT/23/686de6-b13c-4dac-aaae-d8fe2c085810/1/vFOA10K-8kI_z9bTA9c6Z5F6rsA.mft
rsync://rpki.ripe.net/repository/DEFAULT/vFOA10K-8kI_z9bTA9c6Z5F6rsA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:16:d6:d0:5e:d0:d4:24:55:34:eb:87:c1:a8:39:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bc5380d742bef2423fcfd6d303d73a67917aaec0
Validity
Not Before: Mar 26 03:01:18 2026 GMT
Not After : Mar 27 03:01:18 2026 GMT
Subject: CN=9ad7396459d9604546299456962b61355db9d006
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:ae:41:20:c4:64:36:ef:bb:29:1a:93:01:0d:
e5:d0:da:6d:58:77:91:8c:7f:06:38:4d:e3:12:00:
46:04:46:6e:4b:23:46:f1:b1:48:ef:49:66:6e:cf:
bb:7d:52:b9:9a:67:d8:ce:25:c9:82:59:98:bd:c0:
1a:61:b4:3e:0c:3e:fb:97:ef:33:c4:90:18:a9:82:
4a:fd:5d:3e:86:e1:16:14:f7:1d:b1:88:d9:61:d5:
a8:bb:37:88:1b:b2:c4:2a:1e:c3:fb:16:bb:30:a9:
05:9f:2d:4e:29:2a:6b:69:f9:73:38:31:cd:9b:fa:
81:b6:d8:c1:18:1d:a6:98:5b:7f:47:56:4b:c4:55:
cf:04:1e:b5:47:62:9f:e5:47:9b:e9:14:20:64:fe:
dc:b8:57:9e:36:92:27:d5:35:bc:5e:74:a3:b0:73:
2c:d5:42:e8:9f:eb:87:ec:b8:fe:82:f4:7c:6d:0f:
cf:16:d8:d0:9a:51:81:21:c8:73:b9:81:0c:ab:06:
fc:44:23:b5:a7:9e:83:1a:27:23:00:c5:fc:3c:e0:
3f:9e:52:7e:c0:b4:1c:69:2b:c5:f8:b6:0a:c8:9f:
fa:cc:7e:ef:95:b2:60:d8:45:c6:8a:41:c7:0c:f8:
90:f0:1b:2d:fe:86:e4:40:a1:3b:64:72:f0:58:37:
ca:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:D7:39:64:59:D9:60:45:46:29:94:56:96:2B:61:35:5D:B9:D0:06
X509v3 Authority Key Identifier:
keyid:BC:53:80:D7:42:BE:F2:42:3F:CF:D6:D3:03:D7:3A:67:91:7A:AE:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vFOA10K-8kI_z9bTA9c6Z5F6rsA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/686de6-b13c-4dac-aaae-d8fe2c085810/1/vFOA10K-8kI_z9bTA9c6Z5F6rsA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/23/686de6-b13c-4dac-aaae-d8fe2c085810/1/vFOA10K-8kI_z9bTA9c6Z5F6rsA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:c3:f3:32:de:fe:a5:b3:c8:22:b7:12:82:49:cc:f5:91:cd:
9f:21:6d:d2:1f:0f:af:b7:2c:57:1a:e6:b7:a9:80:05:ff:03:
97:3f:89:84:45:0e:b7:87:73:67:b1:b8:99:70:8c:ab:47:82:
18:51:a2:5c:df:5d:39:b0:b3:e9:93:84:c8:47:05:04:f4:b4:
d6:26:ad:79:b3:f1:4f:6d:b5:2b:3f:57:e7:1d:ed:6d:e4:4c:
b1:99:9e:90:04:36:9a:21:7f:f8:7f:6d:bd:ba:a7:f8:40:07:
af:b3:c8:4c:46:94:2e:06:21:e6:15:a4:84:af:70:3d:07:68:
b7:50:b4:8d:15:f3:f6:62:bf:49:1f:66:7b:c0:44:43:3d:47:
db:d9:76:79:f4:68:ac:ce:eb:bb:4a:4f:65:36:b8:0f:88:bb:
26:a4:74:9d:b0:32:4f:d5:f0:55:49:03:54:ff:f7:26:c6:9a:
12:a1:62:ac:0a:61:88:4b:0e:c4:f6:ea:a3:75:62:7b:ee:f5:
40:98:24:55:96:c1:ea:44:59:63:54:2a:3e:b0:7b:b6:88:11:
43:fc:f0:35:b8:61:32:e0:fa:5d:c5:fd:6c:9f:70:e2:c3:69:
0e:b1:7a:46:84:80:c8:88:62:7e:dd:a8:c0:fb:58:8b:69:dc:
eb:8e:6d:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 12:00:15 2026 by rpki-client