
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/89f071-5631-45db-a7e5-cd6152261c6f/1/ExiBcyo-JFqVm8Z54EWMOfiT5Gs.mft
File: ExiBcyo-JFqVm8Z54EWMOfiT5Gs.mft (raw, json)
Hash identifier: DF/EbUQbDfB7Yxs1oiYeTFacWuQcLng8YLEMN9VXkoM=
Subject key identifier: 72:AD:11:C2:9C:FD:31:69:81:8C:D8:BA:38:75:C1:A8:27:4B:E0:9C
Authority key identifier: 13:18:81:73:2A:3E:24:5A:95:9B:C6:79:E0:45:8C:39:F8:93:E4:6B
Certificate issuer: /CN=131881732a3e245a959bc679e0458c39f893e46b
Certificate serial: 019EABA0066CC02E868DD3D3DEB828758649
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ExiBcyo-JFqVm8Z54EWMOfiT5Gs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/89f071-5631-45db-a7e5-cd6152261c6f/1/ExiBcyo-JFqVm8Z54EWMOfiT5Gs.mft
Manifest number: 1A8C
Signing time: Tue 09 Jun 2026 09:04:11 +0000
Manifest this update: Tue 09 Jun 2026 09:04:11 +0000
Manifest next update: Wed 10 Jun 2026 09:04:11 +0000
Files and hashes: 1: 1-FBx6ZH5B0jbU_AnDHCUNaycO4s.roa (hash: u5eV4Uv1MiiJKh19sA1D3lrEkUoskPq0E06VtKGTPQ0=)
2: 2NX_LRuE1z3jpHpzrUm898tAmis.roa (hash: tRNjTSbl0LpDg6CSpzF45sG1AteAxwjtFdSdAvLKBUQ=)
3: 8ytmRdbaYIK-p0argiKofaoScHY.roa (hash: NzZjhETEPOV9qOe2iCOKukIBBkV+9EAmc6ndeYhO0Yg=)
4: 9_cNflmMqGmXtLc9sI5jl1QlQaM.roa (hash: WaSwh01afw0+7AltVHO2SZoKM+p5egBh/VFl1fJY0VA=)
5: BAXDlRr4hsZOEW_53viwbbS5xzI.roa (hash: gMocBTTYk/YSixcQRlGi2Xf0s9GjCcV7bqy4EjzuHxo=)
6: BN3uTsvLVfLQEFEGegnn9TgGMCc.roa (hash: odMOUTahv8T8UIit5Zs817beNixUhfCh509OUC0pTXM=)
7: DBzsUU7BGHocClctL1mvbSIgvxQ.roa (hash: tB5Bok9ukggl6ccJHOzcEVQMglS5kVaS/x4d71htp3M=)
8: DR3Bz7Oan3i6vgko-GvHhPb-Px0.roa (hash: fLmSqodUAGL/yoED3chUFJFBL41B6P99W79IRZINO/g=)
9: ExiBcyo-JFqVm8Z54EWMOfiT5Gs.crl (hash: 5m8n/UNwz0H31j9yiuq0AaFfudqOpe9lJGVxNxTW+0c=)
10: F8M54O5wll-yLxey7uvIxtXUF2s.roa (hash: CzG1Px07BMNstG1/2FWzPXBHxNra8Xo78zL25Hk6SX4=)
11: FsjSFfK1sV6Cz6fjIUlD72cszvQ.roa (hash: DXUUgReqIaf7155cKacK5xPHHnjU+k6nsvsDjDh462M=)
12: G54XLkaMlrOl_RIl-BBLFf32j_4.roa (hash: 1HmrmYZ1lX0kzUUafKsHyk1mrTGQ2bqrAlLdgPA1QtM=)
13: Mq91aHgILLYinYVbGX30JTicK2Y.roa (hash: awH0fZT5nCVQDV/n2dA6uOcYfxt3myd+QXH8nt5Ehzs=)
14: NAvPU3PvWk2BT8zglyKAPm42uoo.roa (hash: 1bUbDIdnIXubMQt2eslQ/ZroPi0FRkjK8z9itzf2nhI=)
15: Oaj1ekGiHqlv1Dma2o_E2V7oad0.roa (hash: wx8arTEOltxp00f50ADtRMGBaOT600gG2onw7S76NlY=)
16: QwqY3xCcCgwIwIboEYJaKH-kb2U.roa (hash: o7oLfHZu1x8Ar12k66Qvb38ZRBeIiBIVHglZulHBXqk=)
17: RG7rOxM8Ma6H0vB0Nnbvb7QSb7o.roa (hash: 9oIF71M4azDz9Rp+FJePfIdA+qSKXEhe8fe/V/zE+yU=)
18: RtdT3axTfmWPymViBZqZaqZKpVY.roa (hash: xtwwjn7DzhN5b7BbjlImOVuCLYyjwLWW/osFbNbKEZQ=)
19: SudU71UvkOpYbLyB5oHg2RyZNWM.roa (hash: xefx53ev5gZHT0Koi4CdtQgqvR9rIS+NoeeLgTHek6k=)
20: YGpB4J28Bf5NHoYTSr4mFJQaBlA.roa (hash: 3JFwMa2Ti1yTw1Xq6RCOz5frDtvKldeHr5rO5JZfbrM=)
21: YJS-MeNYCL_epOUC5Dr8RF8zFZ0.roa (hash: m2DE/6ZTamnRJyCEcFcrnUs7f1LULWgHmaf4oy24rvw=)
22: ZYOk-8jSfRGFtdQ1WZm4ud4ggbw.roa (hash: vBnpPOoyA7SRknNmgCBSXQErqVIQWQFUc5CR8u4l1NU=)
23: _L6W4LfMhfWJ09vbzzO7S_GY5-0.roa (hash: J2rhtfm0oyZ6GIsWYgpAKtYPM/xmQiYzN610SPMqTtk=)
24: _gqR0WwGA3glTlyF8yiHIFlb8dE.roa (hash: mFyXN2DxlKKJyDR5JPAfUo4hQrC8BxOn6sp6aAgxtac=)
25: iRgr7X1SNvsth1aRrCDBL64ZH5s.roa (hash: WGlOgax3raOS8Gd35SURjjtaM33bu/0SNLIELz8luFI=)
26: kUSxd1B8AxZq-RVoBSLSqa7QXIk.roa (hash: t+qukMxzE/OHfBy8j/pvykT6K/D5uPcDEid5KQapwrk=)
27: lTPOzMZpg6OdVupew9ZjU2_lpvE.roa (hash: ZPbvR2hjypfPkQpNeYSZpOXKwwYAVSdHPl7WM1QQ/xU=)
28: nFQ-4d9mVifHam7-is3uppf5zEE.roa (hash: Z0H1orr4k7Fxq1oyTd7PjbF2cno+QKF/rfOWpuxdOPQ=)
29: pF6WBbamDqigpwnYyY54RICcftY.roa (hash: ygHT0Xa9Cg9CYX3EOU9uQc00YLGDZAbjxPnyMu8NUAE=)
30: rfm_-0reLf7PYtJuEP1buHiDkqo.roa (hash: Sj5Ujw/g8ofIjh7PyZ0sM4i+kvY8IKqDptv6WN3btA8=)
31: sGL0IpkAAnhvKoGAh5UWQwRpfVM.roa (hash: mpibMWOyOdzjLVDF60aD5dDfWs60rSKxiTiv1sDZLv8=)
32: v2VfTa7zgDDUSueW5M0x4B_McRo.roa (hash: S+YGBrBrvZW9pavreBXFebt4/41gIio3hTT0WdcvbWU=)
33: x8G1Yoeg0YCKEaI62w0nGtjOEuM.roa (hash: N+Vr1Wpn9wUw6j07nAIbueMPkuP8xWs0XtxciVf3414=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/89f071-5631-45db-a7e5-cd6152261c6f/1/ExiBcyo-JFqVm8Z54EWMOfiT5Gs.crl
rsync://rpki.ripe.net/repository/DEFAULT/2a/89f071-5631-45db-a7e5-cd6152261c6f/1/ExiBcyo-JFqVm8Z54EWMOfiT5Gs.mft
rsync://rpki.ripe.net/repository/DEFAULT/ExiBcyo-JFqVm8Z54EWMOfiT5Gs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 10 Jun 2026 09:04:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:ab:a0:06:6c:c0:2e:86:8d:d3:d3:de:b8:28:75:86:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=131881732a3e245a959bc679e0458c39f893e46b
Validity
Not Before: Jun 9 09:04:11 2026 GMT
Not After : Jun 10 09:04:11 2026 GMT
Subject: CN=72ad11c29cfd3169818cd8ba3875c1a8274be09c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:59:70:6c:7a:7b:7a:75:34:cf:6c:25:e9:eb:
9a:49:8a:a4:b3:8b:65:40:a5:39:d9:b3:3b:1c:66:
26:63:9b:68:59:fa:f1:05:b5:a0:d1:f9:ad:2f:58:
c2:ac:12:fc:b9:b9:50:45:70:30:a3:39:45:07:e0:
61:3f:c7:aa:28:70:74:d9:26:75:4a:e8:a3:c6:34:
bc:08:2d:1c:e8:72:f0:1c:ab:1a:72:cd:da:85:1c:
9b:3d:00:e4:71:03:b0:56:81:30:64:af:45:7f:00:
02:85:57:ae:f1:5e:19:a5:82:80:60:c1:77:f8:16:
22:99:a0:c0:eb:69:52:1e:ea:ad:42:26:d9:13:b8:
85:01:b4:99:8e:c1:25:77:ef:e6:4f:8b:81:dd:ff:
aa:6a:a0:31:47:b9:f6:53:1a:8c:60:b4:52:ce:e3:
a7:ed:d2:e9:9e:8d:51:65:51:1d:86:ec:53:8d:93:
8f:f9:e2:6e:80:43:df:ea:2f:33:4d:74:5e:62:79:
73:92:b5:a5:f5:76:c0:5f:ae:5c:34:af:85:5d:44:
05:f7:ba:2a:8a:c2:76:f2:6a:12:bc:3f:5d:cf:d2:
ac:46:d1:f2:ea:9e:81:dc:cb:9b:60:54:0d:71:f1:
49:61:cf:ad:36:ca:7e:31:1d:8b:fe:e5:91:e9:40:
eb:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:AD:11:C2:9C:FD:31:69:81:8C:D8:BA:38:75:C1:A8:27:4B:E0:9C
X509v3 Authority Key Identifier:
keyid:13:18:81:73:2A:3E:24:5A:95:9B:C6:79:E0:45:8C:39:F8:93:E4:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ExiBcyo-JFqVm8Z54EWMOfiT5Gs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/89f071-5631-45db-a7e5-cd6152261c6f/1/ExiBcyo-JFqVm8Z54EWMOfiT5Gs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/89f071-5631-45db-a7e5-cd6152261c6f/1/ExiBcyo-JFqVm8Z54EWMOfiT5Gs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b1:3c:b5:20:9f:d0:7f:9d:5f:26:8e:70:de:33:19:84:38:12:
47:0b:c3:61:bc:91:0e:fe:ae:4c:42:5d:50:1a:0d:8c:c4:46:
0b:73:11:53:96:f1:e1:a5:8e:51:65:d8:c1:a6:4f:7a:c9:c1:
e7:12:70:c8:23:05:b6:75:1f:62:2a:55:73:41:62:24:cb:9d:
e2:3c:53:35:80:0f:19:50:66:1a:43:6c:b8:f6:f5:72:4d:62:
9b:63:36:be:92:cd:82:25:33:3c:14:81:24:18:01:00:d5:ea:
68:0b:4c:ed:6e:31:41:93:6e:e0:27:ca:a3:2f:b5:49:5e:61:
1d:4e:7c:fe:73:4b:f4:d9:1f:44:17:6c:22:83:05:42:53:be:
15:b7:44:75:6e:9a:65:3c:5a:22:16:ae:64:42:36:84:fc:7e:
60:32:4a:92:0b:d9:2d:bc:64:ad:9a:df:7c:77:14:08:04:43:
21:94:1b:18:a2:ce:d7:af:91:1f:29:c6:e1:1d:dc:41:45:74:
10:ca:13:d7:13:16:e6:e0:e6:53:ec:aa:7d:0f:d1:9e:be:7c:
fb:c3:68:a2:b0:39:6e:f3:07:2f:f6:9f:0a:75:bd:33:82:62:
f7:4d:2c:cf:31:e7:f3:e8:9f:6c:69:39:ad:e9:cf:92:2b:45:
37:06:a8:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 9 16:14:08 2026 by rpki-client