Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/686de6-b13c-4dac-aaae-d8fe2c085810/1/vFOA10K-8kI_z9bTA9c6Z5F6rsA.mft
File: vFOA10K-8kI_z9bTA9c6Z5F6rsA.mft (raw, json)
Hash identifier: GP0iTzKPiOEyZLIivI+HVcX0I9FUYDQhwjaPj3GSqOk=
Subject key identifier: 28:F1:03:53:0D:D8:AA:62:49:F9:01:2D:1D:F9:FE:AF:F7:B7:79:52
Authority key identifier: BC:53:80:D7:42:BE:F2:42:3F:CF:D6:D3:03:D7:3A:67:91:7A:AE:C0
Certificate issuer: /CN=bc5380d742bef2423fcfd6d303d73a67917aaec0
Certificate serial: 019CAA8FBCCE1CC3D89682E1A33A5E3E2A5C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vFOA10K-8kI_z9bTA9c6Z5F6rsA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/686de6-b13c-4dac-aaae-d8fe2c085810/1/vFOA10K-8kI_z9bTA9c6Z5F6rsA.mft
Manifest number: 0440
Signing time: Sun 01 Mar 2026 18:01:12 +0000
Manifest this update: Sun 01 Mar 2026 18:01:12 +0000
Manifest next update: Mon 02 Mar 2026 18:01:12 +0000
Files and hashes: 1: QcbxS7Mw8NbBuK9mNnK6HmsZQRw.roa (hash: w4kPZO+ZQt1G4XTx1vF54QBmA4+gouCZ4x1zUSlQXS4=)
2: vFOA10K-8kI_z9bTA9c6Z5F6rsA.crl (hash: bg2h1DPlIN3EIdX+IuHsYgtam1O5KpCJMcBjDsREu94=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/23/686de6-b13c-4dac-aaae-d8fe2c085810/1/vFOA10K-8kI_z9bTA9c6Z5F6rsA.crl
rsync://rpki.ripe.net/repository/DEFAULT/23/686de6-b13c-4dac-aaae-d8fe2c085810/1/vFOA10K-8kI_z9bTA9c6Z5F6rsA.mft
rsync://rpki.ripe.net/repository/DEFAULT/vFOA10K-8kI_z9bTA9c6Z5F6rsA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:8f:bc:ce:1c:c3:d8:96:82:e1:a3:3a:5e:3e:2a:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bc5380d742bef2423fcfd6d303d73a67917aaec0
Validity
Not Before: Mar 1 18:01:12 2026 GMT
Not After : Mar 2 18:01:12 2026 GMT
Subject: CN=28f103530dd8aa6249f9012d1df9feaff7b77952
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:2c:09:16:db:36:a2:23:14:81:49:10:07:3f:
aa:ed:45:21:46:36:3e:74:eb:53:b4:f0:d4:86:4e:
69:e0:e7:26:da:78:c0:7e:6c:66:fc:be:6c:74:91:
63:bb:56:b3:2d:4f:f6:d7:ac:75:6e:0c:53:8c:65:
38:12:6f:3b:5a:42:7f:53:38:4b:8e:73:62:e1:f1:
d4:17:e7:b4:24:f9:bb:2d:f8:c3:43:76:f3:33:ad:
58:e6:40:55:0a:4b:50:44:02:1a:9f:28:27:56:93:
cf:09:ac:b3:22:e5:23:a4:30:5f:68:dc:bc:4a:65:
5a:d2:e8:a5:30:e9:b0:4d:77:87:80:f9:30:1e:04:
ba:96:c0:d2:ff:e5:88:bb:ae:c9:6b:f1:e2:49:fa:
8b:de:34:d1:12:84:88:81:af:5b:d8:3a:6c:04:d1:
29:4f:24:9f:bd:07:b1:df:81:61:4a:a6:ff:68:3b:
b2:d4:90:f2:ee:35:de:c4:34:3a:ce:ba:9d:86:56:
d6:37:17:05:5a:12:f1:53:00:ac:fa:29:99:df:df:
49:69:76:71:d6:3c:4d:06:98:5c:ae:7d:77:4b:40:
31:44:5f:99:73:28:b0:c1:9a:91:a6:c0:08:e2:8d:
73:aa:b3:16:6c:bd:e3:e9:a4:72:c3:6b:4b:cf:36:
13:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:F1:03:53:0D:D8:AA:62:49:F9:01:2D:1D:F9:FE:AF:F7:B7:79:52
X509v3 Authority Key Identifier:
keyid:BC:53:80:D7:42:BE:F2:42:3F:CF:D6:D3:03:D7:3A:67:91:7A:AE:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vFOA10K-8kI_z9bTA9c6Z5F6rsA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/686de6-b13c-4dac-aaae-d8fe2c085810/1/vFOA10K-8kI_z9bTA9c6Z5F6rsA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/23/686de6-b13c-4dac-aaae-d8fe2c085810/1/vFOA10K-8kI_z9bTA9c6Z5F6rsA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:d8:66:d3:dc:09:c2:d5:3c:d9:8d:6a:48:7a:aa:74:29:95:
91:96:47:9d:e3:ad:d0:d7:47:e9:02:ed:95:8e:bf:d3:44:ed:
b8:15:cd:49:c9:20:c6:76:92:e7:fd:f9:83:fa:41:66:b3:a8:
25:af:3e:a2:a5:c1:83:d1:59:5e:eb:6e:5f:ce:59:39:5f:3d:
c5:0e:a1:c2:e4:8a:b2:fc:72:9f:14:87:5a:c8:03:06:40:b2:
eb:24:90:ff:aa:3b:75:df:40:89:46:d0:d9:0a:65:88:87:b8:
b4:c1:c7:2b:ff:37:d4:e1:03:83:ad:c8:fd:c8:2d:b6:98:58:
21:2a:f2:91:2e:5a:80:bd:aa:e9:69:04:b8:cd:8a:81:ff:e5:
6b:83:48:52:37:2a:90:5b:8f:06:bb:6c:bf:da:29:da:dc:e0:
54:95:59:4c:69:1e:3f:0f:57:75:39:e2:49:08:f7:00:06:bf:
ed:5a:77:81:64:4c:f8:44:53:c3:b7:88:b7:f6:82:ad:0c:62:
04:ee:4c:6a:e3:a4:7d:26:8d:78:f7:48:31:f3:7a:63:c5:50:
41:7c:f8:08:c8:a4:df:e6:73:11:95:5b:1c:5a:01:56:1c:e0:
10:e1:85:4a:2c:5a:45:c6:aa:ea:7f:f0:13:c9:d2:5e:18:8b:
14:12:8a:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 04:06:17 2026 by rpki-client