Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/686de6-b13c-4dac-aaae-d8fe2c085810/1/vFOA10K-8kI_z9bTA9c6Z5F6rsA.mft
File: vFOA10K-8kI_z9bTA9c6Z5F6rsA.mft (raw, json)
Hash identifier: Ha5eh96MMpM81ubjMI36XuGMWHdbgCITzhESFkhtT34=
Subject key identifier: 77:AF:D0:0F:EF:35:45:E4:78:A6:F6:00:8C:68:12:CA:43:AF:AB:5D
Authority key identifier: BC:53:80:D7:42:BE:F2:42:3F:CF:D6:D3:03:D7:3A:67:91:7A:AE:C0
Certificate issuer: /CN=bc5380d742bef2423fcfd6d303d73a67917aaec0
Certificate serial: 019DA3AF4A1A0D53E04A3AA4937A0C1D01D8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vFOA10K-8kI_z9bTA9c6Z5F6rsA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/686de6-b13c-4dac-aaae-d8fe2c085810/1/vFOA10K-8kI_z9bTA9c6Z5F6rsA.mft
Manifest number: 04C1
Signing time: Sun 19 Apr 2026 03:01:07 +0000
Manifest this update: Sun 19 Apr 2026 03:01:07 +0000
Manifest next update: Mon 20 Apr 2026 03:01:07 +0000
Files and hashes: 1: QcbxS7Mw8NbBuK9mNnK6HmsZQRw.roa (hash: w4kPZO+ZQt1G4XTx1vF54QBmA4+gouCZ4x1zUSlQXS4=)
2: vFOA10K-8kI_z9bTA9c6Z5F6rsA.crl (hash: y/ONucyClU1V3aKQxxxHvnqDAsEOg/5E7PrCsjfcESQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/23/686de6-b13c-4dac-aaae-d8fe2c085810/1/vFOA10K-8kI_z9bTA9c6Z5F6rsA.crl
rsync://rpki.ripe.net/repository/DEFAULT/23/686de6-b13c-4dac-aaae-d8fe2c085810/1/vFOA10K-8kI_z9bTA9c6Z5F6rsA.mft
rsync://rpki.ripe.net/repository/DEFAULT/vFOA10K-8kI_z9bTA9c6Z5F6rsA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 02:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a3:af:4a:1a:0d:53:e0:4a:3a:a4:93:7a:0c:1d:01:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bc5380d742bef2423fcfd6d303d73a67917aaec0
Validity
Not Before: Apr 19 03:01:07 2026 GMT
Not After : Apr 20 03:01:07 2026 GMT
Subject: CN=77afd00fef3545e478a6f6008c6812ca43afab5d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:74:6d:a0:55:d6:9b:2c:b1:0c:ed:e4:c2:8e:
3c:1a:fe:91:a5:e7:a9:69:5d:09:02:48:c5:aa:1e:
45:0d:a6:47:d2:3d:09:af:ca:03:bc:74:a1:20:8e:
6f:13:8f:c9:3a:19:56:9c:9a:55:3c:a8:e1:26:0f:
e3:e6:f6:9f:8b:2d:51:e1:13:27:a5:21:14:b0:14:
bc:08:ba:0c:cd:ed:bc:00:56:23:db:cb:6f:7c:37:
6e:03:86:64:6f:4c:42:2a:da:c4:91:81:80:bc:fa:
ff:d0:c3:24:e3:87:32:46:27:71:d3:eb:32:1e:77:
a3:c0:71:3b:dd:42:c4:83:cc:e4:38:2e:b8:7e:c1:
cd:bc:af:da:65:57:ab:39:cd:84:a4:6f:bc:86:bd:
6e:3b:c7:35:cc:b6:af:9e:d0:84:fa:92:d5:26:4b:
4e:9f:07:43:dc:a2:a0:06:d6:a2:c2:82:1c:af:29:
42:8b:90:89:b1:0d:df:94:2f:87:9b:98:5a:f9:48:
ce:2b:44:94:26:79:51:b7:8b:18:87:e4:b5:32:d0:
92:25:1f:22:22:f8:51:00:2d:2b:ea:58:cf:fd:ee:
29:27:e1:4f:39:4b:b6:a6:9b:50:88:29:b2:78:04:
da:35:fb:75:06:2e:00:65:2d:a9:25:f4:5d:5a:b4:
76:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:AF:D0:0F:EF:35:45:E4:78:A6:F6:00:8C:68:12:CA:43:AF:AB:5D
X509v3 Authority Key Identifier:
keyid:BC:53:80:D7:42:BE:F2:42:3F:CF:D6:D3:03:D7:3A:67:91:7A:AE:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vFOA10K-8kI_z9bTA9c6Z5F6rsA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/686de6-b13c-4dac-aaae-d8fe2c085810/1/vFOA10K-8kI_z9bTA9c6Z5F6rsA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/23/686de6-b13c-4dac-aaae-d8fe2c085810/1/vFOA10K-8kI_z9bTA9c6Z5F6rsA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:38:82:50:cf:48:7b:1f:3f:2b:16:94:d9:6d:67:b0:0a:e4:
1f:29:62:24:4c:65:7f:c2:2a:fd:7b:02:b9:1e:94:20:76:20:
c8:bd:f7:5c:76:1c:65:ac:ea:78:92:85:2d:58:0d:81:46:cb:
44:ab:35:c8:1a:39:2b:e4:76:62:f9:0b:09:95:03:b1:ed:06:
6f:50:e4:30:11:34:2c:ce:1c:16:e2:e1:78:bd:bc:e3:8a:19:
ab:d2:33:a4:e9:ed:c3:51:32:1f:be:39:51:12:7d:62:3c:be:
48:55:40:e0:02:04:fc:ac:9a:ea:b2:5f:e1:fe:25:8f:8c:c8:
da:47:cc:12:03:a0:dc:85:60:92:72:82:ec:ca:4e:4e:90:8e:
ae:3e:96:9f:29:84:5c:19:0a:b1:7b:d4:dd:21:61:37:f2:3b:
7a:14:2a:47:14:85:33:28:90:a7:64:cb:e0:7c:4e:ca:b4:16:
6c:33:f9:99:b4:74:e7:07:4b:57:7e:b3:3e:fc:a9:e2:6c:fc:
bf:03:b3:12:96:46:6b:be:c9:55:4f:d9:76:9f:37:51:b2:98:
93:ed:c1:68:22:16:88:60:1f:ca:e0:70:87:4f:f7:73:6e:24:
83:96:26:ad:6c:93:71:20:12:41:1a:3d:8b:75:63:e3:cb:cd:
86:73:c8:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 10:17:01 2026 by rpki-client