
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/2a/89f071-5631-45db-a7e5-cd6152261c6f/1/ExiBcyo-JFqVm8Z54EWMOfiT5Gs.mft
File: ExiBcyo-JFqVm8Z54EWMOfiT5Gs.mft (raw, json)
Hash identifier: ATrubmpnXFBROr8Dns/FgrCtcUnew0qo8pO46MyHZi0=
Subject key identifier: 7F:1B:FD:5A:02:7F:A9:F9:8D:1E:85:F3:48:B8:6C:37:1F:97:FA:CC
Authority key identifier: 13:18:81:73:2A:3E:24:5A:95:9B:C6:79:E0:45:8C:39:F8:93:E4:6B
Certificate issuer: /CN=131881732a3e245a959bc679e0458c39f893e46b
Certificate serial: 01A17C60985D1FBD86D66F840D31EC9BD86D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ExiBcyo-JFqVm8Z54EWMOfiT5Gs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/89f071-5631-45db-a7e5-cd6152261c6f/1/ExiBcyo-JFqVm8Z54EWMOfiT5Gs.mft
Manifest number: 1C11
Signing time: Tue 27 Oct 2026 08:01:07 +0000
Manifest this update: Tue 27 Oct 2026 08:01:07 +0000
Manifest next update: Wed 28 Oct 2026 08:01:07 +0000
Files and hashes: 1: 1-FBx6ZH5B0jbU_AnDHCUNaycO4s.roa (hash: u5eV4Uv1MiiJKh19sA1D3lrEkUoskPq0E06VtKGTPQ0=)
2: 2VzxNAD5xu9qC7p4x02lMD0GwhQ.roa (hash: CAlmRrgnozD3WhBbxiuTcmh3DcHksqgcq9qNexpG6IE=)
3: 4wKJGi00TfJEUaZBXXehCJACzsY.roa (hash: EGXlq5otTfqzYWsP0t4JP1phVZrmx1cNdvt5bkAJb9M=)
4: 5DIXYN3iWyCCglaKPyTEISwSvcQ.roa (hash: wzPomSvtsUqVc3cXXuStopuzX0SMyf27R/3+Wz39SlQ=)
5: 8ytmRdbaYIK-p0argiKofaoScHY.roa (hash: NzZjhETEPOV9qOe2iCOKukIBBkV+9EAmc6ndeYhO0Yg=)
6: 9ooz9b_e6pHWMlAuH55rcu6Y1vI.roa (hash: z9n0EkwTD8zfbj6iuYYJ7TWAU4nOskFjruLg1WEgFJU=)
7: BN3uTsvLVfLQEFEGegnn9TgGMCc.roa (hash: odMOUTahv8T8UIit5Zs817beNixUhfCh509OUC0pTXM=)
8: DR3Bz7Oan3i6vgko-GvHhPb-Px0.roa (hash: fLmSqodUAGL/yoED3chUFJFBL41B6P99W79IRZINO/g=)
9: ExiBcyo-JFqVm8Z54EWMOfiT5Gs.crl (hash: 90dp834iFtFChDUkc3/Ac37GKRjRYOy7AoTVCNxoUxE=)
10: G54XLkaMlrOl_RIl-BBLFf32j_4.roa (hash: 1HmrmYZ1lX0kzUUafKsHyk1mrTGQ2bqrAlLdgPA1QtM=)
11: Ga2QoPplZN3qKWPe3jkeI2wCvbY.roa (hash: pyCcsaIPtu6Vo+y1Dhxv1YatwFjCk/g8B0UeKITfXUI=)
12: IPLGv0US97sSy2so8ybZW-F94GU.roa (hash: FxRxqqR98ewhv60P9Joq8XQAeUir1CuoS/ZVeTaCiq8=)
13: LC8JdHb7mQK2U35xl1WDG4Ecgco.roa (hash: ZOsWFR7wNV8Rqt3zChMJWe1z+CmXOSdrTussL35X9v4=)
14: Mq91aHgILLYinYVbGX30JTicK2Y.roa (hash: awH0fZT5nCVQDV/n2dA6uOcYfxt3myd+QXH8nt5Ehzs=)
15: NAvPU3PvWk2BT8zglyKAPm42uoo.roa (hash: 1bUbDIdnIXubMQt2eslQ/ZroPi0FRkjK8z9itzf2nhI=)
16: Oaj1ekGiHqlv1Dma2o_E2V7oad0.roa (hash: wx8arTEOltxp00f50ADtRMGBaOT600gG2onw7S76NlY=)
17: QwqY3xCcCgwIwIboEYJaKH-kb2U.roa (hash: o7oLfHZu1x8Ar12k66Qvb38ZRBeIiBIVHglZulHBXqk=)
18: RG7rOxM8Ma6H0vB0Nnbvb7QSb7o.roa (hash: 9oIF71M4azDz9Rp+FJePfIdA+qSKXEhe8fe/V/zE+yU=)
19: RtdT3axTfmWPymViBZqZaqZKpVY.roa (hash: xtwwjn7DzhN5b7BbjlImOVuCLYyjwLWW/osFbNbKEZQ=)
20: SudU71UvkOpYbLyB5oHg2RyZNWM.roa (hash: xefx53ev5gZHT0Koi4CdtQgqvR9rIS+NoeeLgTHek6k=)
21: XrDTmDzs64c5qX1gh7L5krKuVkE.roa (hash: 1JVzR17fJnA+go53ILZNeVknKR2J/wMTrwUVn89IGUg=)
22: YGpB4J28Bf5NHoYTSr4mFJQaBlA.roa (hash: 3JFwMa2Ti1yTw1Xq6RCOz5frDtvKldeHr5rO5JZfbrM=)
23: YJS-MeNYCL_epOUC5Dr8RF8zFZ0.roa (hash: m2DE/6ZTamnRJyCEcFcrnUs7f1LULWgHmaf4oy24rvw=)
24: _gqR0WwGA3glTlyF8yiHIFlb8dE.roa (hash: mFyXN2DxlKKJyDR5JPAfUo4hQrC8BxOn6sp6aAgxtac=)
25: kUSxd1B8AxZq-RVoBSLSqa7QXIk.roa (hash: t+qukMxzE/OHfBy8j/pvykT6K/D5uPcDEid5KQapwrk=)
26: lTPOzMZpg6OdVupew9ZjU2_lpvE.roa (hash: ZPbvR2hjypfPkQpNeYSZpOXKwwYAVSdHPl7WM1QQ/xU=)
27: lm0JDakseN4M9k5prGS2OV01r6E.roa (hash: tfEpnDtBaRvT6Y+MzPXehc/2PbbXY6lqNNMqfIJXsn0=)
28: nFQ-4d9mVifHam7-is3uppf5zEE.roa (hash: Z0H1orr4k7Fxq1oyTd7PjbF2cno+QKF/rfOWpuxdOPQ=)
29: pF6WBbamDqigpwnYyY54RICcftY.roa (hash: ygHT0Xa9Cg9CYX3EOU9uQc00YLGDZAbjxPnyMu8NUAE=)
30: rfm_-0reLf7PYtJuEP1buHiDkqo.roa (hash: Sj5Ujw/g8ofIjh7PyZ0sM4i+kvY8IKqDptv6WN3btA8=)
31: sGL0IpkAAnhvKoGAh5UWQwRpfVM.roa (hash: mpibMWOyOdzjLVDF60aD5dDfWs60rSKxiTiv1sDZLv8=)
32: uSSKGqOBXnTR7MVUEQlQOSZ9RT0.roa (hash: NX7M1wXUZXHf/C4RkIE/pAqdDJdNXJnIC49rcaGZIgQ=)
33: v2VfTa7zgDDUSueW5M0x4B_McRo.roa (hash: S+YGBrBrvZW9pavreBXFebt4/41gIio3hTT0WdcvbWU=)
34: vNKJbq7sgPhqXw5SMPwr35OOBKY.roa (hash: pnAoWrIMlPjHRDA5XzS4i12EZLWJqtsj6vsVfzM7HuM=)
35: x8G1Yoeg0YCKEaI62w0nGtjOEuM.roa (hash: N+Vr1Wpn9wUw6j07nAIbueMPkuP8xWs0XtxciVf3414=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/89f071-5631-45db-a7e5-cd6152261c6f/1/ExiBcyo-JFqVm8Z54EWMOfiT5Gs.crl
rsync://rpki.ripe.net/repository/DEFAULT/2a/89f071-5631-45db-a7e5-cd6152261c6f/1/ExiBcyo-JFqVm8Z54EWMOfiT5Gs.mft
rsync://rpki.ripe.net/repository/DEFAULT/ExiBcyo-JFqVm8Z54EWMOfiT5Gs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:7c:60:98:5d:1f:bd:86:d6:6f:84:0d:31:ec:9b:d8:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=131881732a3e245a959bc679e0458c39f893e46b
Validity
Not Before: Oct 27 08:01:07 2026 GMT
Not After : Oct 28 08:01:07 2026 GMT
Subject: CN=7f1bfd5a027fa9f98d1e85f348b86c371f97facc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:bf:06:55:8a:88:80:62:c2:79:e2:6d:cb:53:
79:6a:07:79:5b:ba:e7:e8:47:61:37:08:df:b8:a8:
fa:b5:0d:53:f6:eb:dc:a6:17:dd:04:3c:7b:bb:65:
29:6d:97:9b:76:ad:de:1e:27:18:67:13:ee:e1:1c:
62:9c:bd:a1:66:cd:61:00:b1:df:c6:32:5d:d9:09:
d7:3e:8b:c6:89:d5:ef:c8:32:a3:88:bd:63:58:3e:
4a:e7:4b:10:d7:c4:d5:75:25:cc:94:06:3a:78:c9:
5a:02:e7:4c:2d:d3:f0:01:2c:66:5d:22:4e:a3:fd:
1b:7c:93:3f:01:55:49:58:96:f2:b4:fc:0e:1e:cd:
c4:4a:ec:35:db:86:bd:a1:cc:81:7e:02:37:d7:7f:
6b:ba:39:2e:1a:b5:cc:a6:86:2c:19:ad:4d:57:3d:
a5:03:8a:a4:52:ae:7c:d3:2b:77:27:1c:ae:64:2e:
1d:db:77:25:cf:2c:17:ad:cd:56:0a:d5:0a:e9:a2:
5d:88:65:99:a7:59:56:b9:f2:41:88:47:77:67:69:
00:05:35:e1:ff:72:e1:a5:24:45:ff:bf:ee:75:7c:
74:6b:36:62:6b:c9:cd:bd:74:74:4d:79:86:48:03:
11:d9:b4:65:7d:84:3a:86:92:1f:fb:a0:8b:cf:43:
72:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:1B:FD:5A:02:7F:A9:F9:8D:1E:85:F3:48:B8:6C:37:1F:97:FA:CC
X509v3 Authority Key Identifier:
keyid:13:18:81:73:2A:3E:24:5A:95:9B:C6:79:E0:45:8C:39:F8:93:E4:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ExiBcyo-JFqVm8Z54EWMOfiT5Gs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/89f071-5631-45db-a7e5-cd6152261c6f/1/ExiBcyo-JFqVm8Z54EWMOfiT5Gs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/89f071-5631-45db-a7e5-cd6152261c6f/1/ExiBcyo-JFqVm8Z54EWMOfiT5Gs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:3a:e9:81:83:3c:1c:13:36:0e:cd:4b:ae:b0:a4:27:ab:8a:
42:35:1e:d1:14:d5:2b:7e:b4:31:69:74:1a:56:42:da:2c:6e:
67:ed:c8:23:7a:87:a6:ed:3c:8b:e3:97:f3:85:38:91:c4:48:
05:40:00:7e:01:70:05:63:a0:0c:fd:14:24:72:ce:4d:d0:c3:
b8:d7:1c:7d:1b:2f:09:5d:af:f7:63:23:0d:4b:b6:d9:66:a0:
08:bd:68:39:db:23:dd:1e:89:b5:98:98:2e:be:0f:38:0b:55:
1c:de:1c:fb:93:d0:01:25:fd:b4:7c:83:3a:fa:a1:ec:42:7d:
93:6c:e3:0b:c6:e0:0a:e3:77:49:94:aa:50:19:28:00:98:ee:
47:f8:71:94:38:e7:49:11:52:38:2c:da:c8:ba:dc:a8:40:b3:
7d:0c:38:b5:cc:f3:ac:de:d1:db:96:ab:ec:1c:e4:a0:00:0c:
08:10:af:50:23:8f:2d:27:1e:a8:df:a9:22:a6:b2:39:78:7e:
5e:e6:bf:4e:8f:57:ad:24:b6:fc:29:2f:c9:dc:a9:a3:37:10:
e3:1b:34:af:e9:c3:05:ab:24:68:9a:50:12:6d:a2:c2:ef:74:
c0:89:02:c2:49:15:c4:0f:d6:d9:56:73:a8:1c:3f:b1:2f:75:
a0:50:86:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 15:42:53 2026 by rpki-client