Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/23/686de6-b13c-4dac-aaae-d8fe2c085810/1/vFOA10K-8kI_z9bTA9c6Z5F6rsA.mft
File: vFOA10K-8kI_z9bTA9c6Z5F6rsA.mft (raw, json)
Hash identifier: yZwxR6h3PW9/seveyDFVmaMS9GjI46m4x+I8aSuLYnw=
Subject key identifier: B9:BB:56:BB:8C:77:BA:4E:2D:8E:22:A4:71:02:25:5E:E0:B8:30:BF
Authority key identifier: BC:53:80:D7:42:BE:F2:42:3F:CF:D6:D3:03:D7:3A:67:91:7A:AE:C0
Certificate issuer: /CN=bc5380d742bef2423fcfd6d303d73a67917aaec0
Certificate serial: 01A0D2A5ED132BC1770F1A85C12AB45E78DE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vFOA10K-8kI_z9bTA9c6Z5F6rsA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/686de6-b13c-4dac-aaae-d8fe2c085810/1/vFOA10K-8kI_z9bTA9c6Z5F6rsA.mft
Manifest number: 0667
Signing time: Thu 24 Sep 2026 09:01:24 +0000
Manifest this update: Thu 24 Sep 2026 09:01:24 +0000
Manifest next update: Fri 25 Sep 2026 09:01:24 +0000
Files and hashes: 1: QcbxS7Mw8NbBuK9mNnK6HmsZQRw.roa (hash: w4kPZO+ZQt1G4XTx1vF54QBmA4+gouCZ4x1zUSlQXS4=)
2: vFOA10K-8kI_z9bTA9c6Z5F6rsA.crl (hash: 9NHoPVUo4fUebiFwlASKJJLquhP4D0QGfF/S0JNgRrk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/23/686de6-b13c-4dac-aaae-d8fe2c085810/1/vFOA10K-8kI_z9bTA9c6Z5F6rsA.crl
rsync://rpki.ripe.net/repository/DEFAULT/23/686de6-b13c-4dac-aaae-d8fe2c085810/1/vFOA10K-8kI_z9bTA9c6Z5F6rsA.mft
rsync://rpki.ripe.net/repository/DEFAULT/vFOA10K-8kI_z9bTA9c6Z5F6rsA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 09:01:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d2:a5:ed:13:2b:c1:77:0f:1a:85:c1:2a:b4:5e:78:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bc5380d742bef2423fcfd6d303d73a67917aaec0
Validity
Not Before: Sep 24 09:01:24 2026 GMT
Not After : Sep 25 09:01:24 2026 GMT
Subject: CN=b9bb56bb8c77ba4e2d8e22a47102255ee0b830bf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:ce:d5:14:28:d7:a5:9c:ec:af:0a:a3:87:1c:
a6:55:20:07:01:54:be:f0:8c:97:29:ea:33:ff:e8:
77:45:e9:27:8a:93:85:f8:12:02:d9:17:6f:91:09:
0c:4b:a0:ca:87:4d:13:48:98:56:01:23:1e:fb:c7:
3e:ef:9b:8b:82:7b:9d:50:30:a2:be:95:18:0f:cb:
8d:81:98:77:91:6d:cf:3c:56:75:a8:00:cb:0a:87:
dc:6b:90:33:4f:a3:23:b3:35:5e:18:f4:15:01:d6:
1e:bd:18:63:df:a6:a2:f0:b6:fc:1b:79:43:ee:db:
8b:1b:c1:21:df:7d:69:c5:97:69:14:b9:63:e7:56:
2d:24:fb:d4:80:0d:6b:69:1b:12:02:e4:55:63:3e:
77:db:ea:1f:2d:e9:11:58:81:63:d6:57:cb:c7:79:
69:bf:95:3a:d3:7d:b5:54:20:ba:ab:b3:7f:c6:d5:
0f:60:de:00:47:04:a0:8b:88:2e:5b:e5:21:b4:1b:
cf:87:e4:fe:1e:8f:3f:da:76:f3:79:10:34:73:62:
08:42:3c:bf:d6:de:b0:58:08:66:e2:a7:72:13:2d:
8b:f3:30:53:55:b9:0d:3f:51:84:89:ea:51:fb:9e:
73:0e:25:23:7a:5b:1f:30:78:da:cb:c1:21:13:64:
e4:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:BB:56:BB:8C:77:BA:4E:2D:8E:22:A4:71:02:25:5E:E0:B8:30:BF
X509v3 Authority Key Identifier:
keyid:BC:53:80:D7:42:BE:F2:42:3F:CF:D6:D3:03:D7:3A:67:91:7A:AE:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vFOA10K-8kI_z9bTA9c6Z5F6rsA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/686de6-b13c-4dac-aaae-d8fe2c085810/1/vFOA10K-8kI_z9bTA9c6Z5F6rsA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/23/686de6-b13c-4dac-aaae-d8fe2c085810/1/vFOA10K-8kI_z9bTA9c6Z5F6rsA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
96:ae:f1:40:4d:d1:36:0b:c7:bb:2b:db:62:4b:e7:42:f5:b1:
b4:64:04:74:63:e9:c6:fc:98:45:3a:2d:cd:d5:49:ed:53:33:
59:a8:a0:f4:4a:70:ac:11:cf:10:22:bd:43:a6:fe:b1:47:4a:
3f:b5:f2:4c:df:8a:aa:6b:23:c0:89:0a:a3:ef:4c:db:0a:fa:
db:fd:a4:45:53:e7:16:79:92:77:6a:13:c8:06:35:2d:df:46:
41:20:18:cb:17:65:40:d0:09:14:2d:c3:f5:4b:aa:44:c6:04:
a9:6b:76:3b:77:a3:0c:86:f1:66:7e:22:b6:a3:17:2b:0c:38:
eb:05:fb:e6:21:9b:1c:0d:74:6d:b7:df:17:32:1b:d7:df:5e:
cf:e4:95:85:08:a1:2c:41:a1:9e:3a:b4:c2:e2:3a:b2:25:56:
85:b1:10:b6:88:5a:83:fd:9e:bb:91:45:50:2f:44:c5:97:f1:
d5:b5:ca:04:47:f4:2a:8a:04:37:22:7b:8b:99:62:53:7a:a9:
6e:fc:a0:44:35:b3:cf:c0:76:b5:ce:83:ea:38:d0:c5:1f:f2:
9f:f8:86:c0:5b:ca:ee:53:bd:84:60:f3:8f:f4:0a:33:e0:ce:
01:f5:6e:e7:04:ea:3a:06:2b:bc:dd:e7:5f:63:06:8d:e6:b3:
f5:2b:ec:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 20:16:27 2026 by rpki-client