Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/686de6-b13c-4dac-aaae-d8fe2c085810/1/vFOA10K-8kI_z9bTA9c6Z5F6rsA.mft
File: vFOA10K-8kI_z9bTA9c6Z5F6rsA.mft (raw, json)
Hash identifier: FTedK7ztw5zfGeiNDwqxJZGxTTwHAG0pXvftObMFDtw=
Subject key identifier: 5B:AC:BA:F2:A4:9D:0C:56:2E:96:B9:B2:86:E4:56:E2:5B:B7:7F:A2
Authority key identifier: BC:53:80:D7:42:BE:F2:42:3F:CF:D6:D3:03:D7:3A:67:91:7A:AE:C0
Certificate issuer: /CN=bc5380d742bef2423fcfd6d303d73a67917aaec0
Certificate serial: 019FAB2CB2ADFE44BFCF49CD5BD52F3BD083
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vFOA10K-8kI_z9bTA9c6Z5F6rsA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/686de6-b13c-4dac-aaae-d8fe2c085810/1/vFOA10K-8kI_z9bTA9c6Z5F6rsA.mft
Manifest number: 05CE
Signing time: Wed 29 Jul 2026 00:01:00 +0000
Manifest this update: Wed 29 Jul 2026 00:01:00 +0000
Manifest next update: Thu 30 Jul 2026 00:01:00 +0000
Files and hashes: 1: QcbxS7Mw8NbBuK9mNnK6HmsZQRw.roa (hash: w4kPZO+ZQt1G4XTx1vF54QBmA4+gouCZ4x1zUSlQXS4=)
2: vFOA10K-8kI_z9bTA9c6Z5F6rsA.crl (hash: MZJZgnuy8PEWcPP19NBh7YZnNPdqont8wO3BkWQEMQg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/23/686de6-b13c-4dac-aaae-d8fe2c085810/1/vFOA10K-8kI_z9bTA9c6Z5F6rsA.crl
rsync://rpki.ripe.net/repository/DEFAULT/23/686de6-b13c-4dac-aaae-d8fe2c085810/1/vFOA10K-8kI_z9bTA9c6Z5F6rsA.mft
rsync://rpki.ripe.net/repository/DEFAULT/vFOA10K-8kI_z9bTA9c6Z5F6rsA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ab:2c:b2:ad:fe:44:bf:cf:49:cd:5b:d5:2f:3b:d0:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bc5380d742bef2423fcfd6d303d73a67917aaec0
Validity
Not Before: Jul 29 00:01:00 2026 GMT
Not After : Jul 30 00:01:00 2026 GMT
Subject: CN=5bacbaf2a49d0c562e96b9b286e456e25bb77fa2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:20:0a:67:30:e2:67:7f:58:61:d0:24:fc:0f:
ae:6e:e4:2d:2f:c7:1a:39:bc:5d:56:a5:ff:d7:12:
18:12:6a:c8:fd:f6:51:cc:d7:33:54:b3:ed:77:e8:
31:c5:40:cc:67:ee:7b:8c:b3:45:d0:b2:ae:3a:08:
5b:69:5f:18:8c:e2:72:5c:26:0f:38:71:b3:a0:bb:
b2:ab:0b:ad:9d:b2:9c:23:c0:52:13:a0:e2:e1:97:
f6:f4:3d:88:7c:2d:2b:9c:06:04:2d:b7:7b:aa:8e:
f5:bf:5e:e8:7a:b0:f4:03:1e:e5:82:55:cf:b2:e1:
c7:a6:8a:11:2b:24:b6:39:c1:52:91:66:f2:0c:85:
fa:c3:79:83:be:62:66:3f:8b:7d:45:ef:d2:83:9b:
1f:f6:34:75:9a:f4:31:0f:cf:8e:6e:58:27:5a:58:
01:dc:9d:d8:db:fe:16:a0:03:eb:62:57:9c:1f:c5:
dd:86:66:16:a0:2b:15:c0:ac:80:38:d1:08:c0:01:
53:3a:84:d7:88:09:91:b9:e9:43:96:83:38:2c:7d:
77:c8:e5:43:c0:1f:7d:8d:1c:e4:9c:75:01:68:23:
98:49:21:16:71:80:fa:35:88:99:80:1b:08:70:2a:
22:16:9d:a1:93:b1:3d:a4:c2:4d:85:38:1c:f2:80:
5f:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:AC:BA:F2:A4:9D:0C:56:2E:96:B9:B2:86:E4:56:E2:5B:B7:7F:A2
X509v3 Authority Key Identifier:
keyid:BC:53:80:D7:42:BE:F2:42:3F:CF:D6:D3:03:D7:3A:67:91:7A:AE:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vFOA10K-8kI_z9bTA9c6Z5F6rsA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/686de6-b13c-4dac-aaae-d8fe2c085810/1/vFOA10K-8kI_z9bTA9c6Z5F6rsA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/23/686de6-b13c-4dac-aaae-d8fe2c085810/1/vFOA10K-8kI_z9bTA9c6Z5F6rsA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
90:62:da:fd:06:3a:91:8b:21:d8:86:3a:f0:48:ca:ea:a7:2a:
93:8b:cc:bf:9e:a9:08:c0:f0:d9:8f:ea:81:5e:0e:b4:d7:25:
09:57:61:55:9d:45:41:1f:5a:3b:87:7d:cb:2c:62:ed:6c:f2:
ce:ed:6b:40:82:b1:70:55:74:4d:ec:f0:3c:cf:d3:3e:ce:fa:
29:0a:c5:32:d8:ac:20:86:84:36:24:0a:b2:e6:2b:a5:3f:4d:
c3:87:3e:1e:05:bf:4b:e6:ab:08:24:8d:4b:ef:df:7e:13:b5:
39:5c:44:c7:ef:91:4a:c0:e4:8d:5f:5b:84:0a:08:7d:23:76:
89:ce:bc:80:7c:c4:4b:88:09:c6:3c:48:cf:03:5c:fa:71:3a:
b4:75:6c:08:b7:80:e1:38:a5:1e:c1:5d:a6:90:23:80:0a:e2:
df:d5:ab:d6:ea:4d:83:a6:14:b3:79:7a:3a:03:34:11:25:f3:
6e:a0:b7:6d:3f:5d:bc:ab:72:5a:6d:4d:89:e8:b2:14:55:10:
ec:8f:ce:bd:eb:4b:62:f6:da:0e:8e:6c:15:dd:9b:19:ab:4c:
9c:4f:6e:93:0b:97:e3:55:50:77:55:04:d1:db:bb:f9:f8:8e:
ae:f9:e7:f1:3d:a9:f2:96:04:58:4c:d9:3a:0a:24:33:e3:f2:
70:ef:65:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 09:19:02 2026 by rpki-client