Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/23/686de6-b13c-4dac-aaae-d8fe2c085810/1/vFOA10K-8kI_z9bTA9c6Z5F6rsA.mft
File: vFOA10K-8kI_z9bTA9c6Z5F6rsA.mft (raw, json)
Hash identifier: iN1KjN2Kcjsdg/eFNMv6W3pjAVqMFq3RO3hMcHBzw3k=
Subject key identifier: 86:9E:74:8D:DE:6F:22:44:EF:0D:32:2A:A6:19:B6:86:BA:E3:62:52
Authority key identifier: BC:53:80:D7:42:BE:F2:42:3F:CF:D6:D3:03:D7:3A:67:91:7A:AE:C0
Certificate issuer: /CN=bc5380d742bef2423fcfd6d303d73a67917aaec0
Certificate serial: 01A0E7E482059B7FCF07C87011FF5C96CE00
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vFOA10K-8kI_z9bTA9c6Z5F6rsA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/686de6-b13c-4dac-aaae-d8fe2c085810/1/vFOA10K-8kI_z9bTA9c6Z5F6rsA.mft
Manifest number: 0672
Signing time: Mon 28 Sep 2026 12:01:47 +0000
Manifest this update: Mon 28 Sep 2026 12:01:47 +0000
Manifest next update: Tue 29 Sep 2026 12:01:47 +0000
Files and hashes: 1: QcbxS7Mw8NbBuK9mNnK6HmsZQRw.roa (hash: w4kPZO+ZQt1G4XTx1vF54QBmA4+gouCZ4x1zUSlQXS4=)
2: vFOA10K-8kI_z9bTA9c6Z5F6rsA.crl (hash: gKHLPoMr5lj/x7C1xvWAFL2s6Ddnr55NDimER+4jTyE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/23/686de6-b13c-4dac-aaae-d8fe2c085810/1/vFOA10K-8kI_z9bTA9c6Z5F6rsA.crl
rsync://rpki.ripe.net/repository/DEFAULT/23/686de6-b13c-4dac-aaae-d8fe2c085810/1/vFOA10K-8kI_z9bTA9c6Z5F6rsA.mft
rsync://rpki.ripe.net/repository/DEFAULT/vFOA10K-8kI_z9bTA9c6Z5F6rsA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Sep 2026 08:02:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e7:e4:82:05:9b:7f:cf:07:c8:70:11:ff:5c:96:ce:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bc5380d742bef2423fcfd6d303d73a67917aaec0
Validity
Not Before: Sep 28 12:01:47 2026 GMT
Not After : Sep 29 12:01:47 2026 GMT
Subject: CN=869e748dde6f2244ef0d322aa619b686bae36252
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:c7:67:56:7b:58:32:cb:b1:f6:77:72:91:5b:
38:50:e4:90:9b:26:1e:b0:e0:ab:bf:c1:69:13:21:
56:e1:fa:ea:3b:7d:c3:69:64:23:e8:f8:ee:4b:ee:
0b:c0:0f:f1:03:c7:db:91:9a:60:93:fd:8b:dc:0e:
b4:8f:af:19:c1:b1:af:4f:42:44:5f:c4:f7:c2:29:
34:d3:68:f0:70:dd:be:1e:61:db:bf:98:3c:98:a3:
39:69:25:6a:2e:c4:cd:20:b9:dd:27:e3:ae:09:2d:
32:45:52:b2:e9:31:ce:e9:90:0f:e2:c5:21:ef:e8:
8b:a6:09:2c:41:6e:78:5c:1e:d0:90:6b:9c:31:48:
c0:73:e9:cc:d2:33:5f:07:4c:74:56:59:0f:ab:58:
3c:b9:0e:f5:1d:d5:7f:34:12:d9:4d:6d:03:40:ee:
01:4c:bc:89:ff:5c:4b:5c:6b:1f:91:ae:a7:3d:20:
95:42:94:a6:8c:ac:72:28:04:ff:26:c2:01:15:ff:
ec:20:79:55:8e:85:74:d5:52:13:7b:a0:69:72:c0:
e3:ce:14:a0:38:4c:82:99:d0:59:f3:ff:56:90:fe:
a8:e8:7e:08:65:7a:8c:26:18:af:36:31:56:31:9c:
40:93:50:77:40:2a:ca:28:61:24:19:61:38:57:db:
3e:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:9E:74:8D:DE:6F:22:44:EF:0D:32:2A:A6:19:B6:86:BA:E3:62:52
X509v3 Authority Key Identifier:
keyid:BC:53:80:D7:42:BE:F2:42:3F:CF:D6:D3:03:D7:3A:67:91:7A:AE:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vFOA10K-8kI_z9bTA9c6Z5F6rsA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/686de6-b13c-4dac-aaae-d8fe2c085810/1/vFOA10K-8kI_z9bTA9c6Z5F6rsA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/23/686de6-b13c-4dac-aaae-d8fe2c085810/1/vFOA10K-8kI_z9bTA9c6Z5F6rsA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:11:e7:5b:e3:1b:ae:12:f4:b0:e2:2b:6f:05:ee:4e:b4:3b:
8c:3a:7d:79:86:c3:fe:9d:da:84:04:d0:70:6e:0b:2c:7b:8d:
26:bb:69:0b:c0:c5:ff:c4:0f:1d:64:ae:36:cc:6d:71:f8:84:
5e:4b:e3:07:c9:3c:c5:02:3e:89:cb:cc:cf:42:7a:45:41:1e:
e1:a5:ad:34:19:f9:e3:2c:7a:b6:84:64:1c:ea:e3:c3:29:47:
f7:12:0c:68:02:2a:be:4e:cb:58:58:97:ac:5e:83:bc:b4:ed:
b8:01:40:97:82:cd:de:89:a6:ea:60:f6:25:c4:c7:12:e1:7d:
61:a7:81:19:a1:87:3b:3b:ba:39:36:ac:19:91:31:17:2b:b6:
74:68:36:48:2b:21:6f:aa:6d:8b:87:f0:f3:a4:c9:85:6b:24:
49:92:ed:71:89:1b:1b:df:92:fc:ce:e4:75:c3:8f:b6:16:d9:
c6:1c:32:62:87:20:b1:35:c3:35:d5:ae:83:60:bf:71:66:f1:
26:34:30:f8:f9:10:46:cc:25:33:d8:69:a4:3c:6f:25:0b:36:
c4:a6:3a:ed:fa:1f:c1:b1:e1:44:5e:8f:10:db:33:0d:fa:8f:
8d:9e:51:1b:a8:c2:3e:38:5d:53:f1:64:4e:04:02:0c:cd:8d:
48:28:6b:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 28 14:09:27 2026 by rpki-client