$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/c7ee9e-b5bf-4c2d-a983-dee3ed497aee/1/Ben8oKhYT-scEjGQcUIwYbCP5FY.mft File: Ben8oKhYT-scEjGQcUIwYbCP5FY.mft (raw, json) Hash identifier: egQdqKnQkA4uAjyv7/p6CaXB8njnQJy2GcO3/J8fcQU= Subject key identifier: A0:49:C7:0F:79:41:5E:41:17:4A:DD:BF:D0:0A:13:D7:8D:45:9F:0F Authority key identifier: 05:E9:FC:A0:A8:58:4F:EB:1C:12:31:90:71:42:30:61:B0:8F:E4:56 Certificate issuer: /CN=05e9fca0a8584feb1c12319071423061b08fe456 Certificate serial: 019D984FEC61899D2421176DC679DF002BC4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ben8oKhYT-scEjGQcUIwYbCP5FY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/c7ee9e-b5bf-4c2d-a983-dee3ed497aee/1/Ben8oKhYT-scEjGQcUIwYbCP5FY.mft Manifest number: 10D1 Signing time: Thu 16 Apr 2026 22:01:07 +0000 Manifest this update: Thu 16 Apr 2026 22:01:07 +0000 Manifest next update: Fri 17 Apr 2026 22:01:07 +0000 Files and hashes: 1: 1-wzLZgHvoTtKlJUwiMWH2FcMG2Q.roa (hash: gecXtL6bXbTjxAwUSJNxs49kgp0JytqkT3osewNP9Tg=) 2: Ben8oKhYT-scEjGQcUIwYbCP5FY.crl (hash: 3FOhi4nsExDFviy6nHOQNiSwPG3X2dngFNK52e7be/4=) 3: IgX0yg7OLyE1FEmaOzvAFNwec_c.roa (hash: sizb6eBcughEhem8l1JDf+pWnplrlybiAHwSKXoLMaY=) 4: K0Zub9dKWzCjs4OtkVc_n0LFVVw.roa (hash: WAtq4VjFyxJkBBrD+rRuoVlhMvETsjV5L4Bhvcl0PsU=) 5: L9TWZulmOgbRwrR8pCdihrCbfKY.roa (hash: kpba41p+9FSP2a4Hqmm3zRooFrFU9Uu5ujkaJiigN30=) 6: LyKLy6uT_WPlcRb0ykSf0GYdO4Y.roa (hash: Ws+t3EfpSQ+jlmW0/VstL/1QYYDtPwZDFVE4WDXtUAE=) 7: ML_7NS0uYkmp6GXXamZ3NSPsWOo.roa (hash: hnjHFSEUgTDrMvjlYwRL85H6sKIUA3yDjfvutZSmzgw=) 8: NMzuJZbxOy1LB40urUAindiN9YQ.roa (hash: BSKmMcbD/mOVfjihHJhWhwgJ1b6f29GirmFpN4Kj09M=) 9: YykfUYmRRbTXt94f_g0l_IynvDo.roa (hash: pI8Hi2Q8oLa5BZOGg0QPtqf72tmXIsLTGFmFi6JksGg=) 10: cyPQOcdzS_4SfdQdVz0CqSZMdww.roa (hash: 0WNUn7RLirYyARkbquAfInmWqcScy7Jj0jC1hD9xaio=) 11: f0VpgrAXaT3oVxZDOEU2iV1iNSY.roa (hash: iJgG1N6+Tuj84TVnx/5i89nDxTeYyLA4QQjr6o+oq3c=) 12: iYDni8VjNDDolmH_F5AAYHgrmp4.roa (hash: /oy9SLJqYCjuGSfbl4Oo1wvrMBYnNp3f2GJuXLzrOuo=) 13: jkeoRlUiAeo681KZqVdOpuHmKaA.roa (hash: lXnp/mWSzniqxvseJ8C7/Fc99Ljtz0HvIJlr2A2Qz1U=) 14: sZ0JiVG1Az1Dn7s8zECVmXzJnwo.roa (hash: 6tprys5RYcVu5F7SPPiEgBOyn1Agoq+HAa+NVM9JSXc=) 15: y_l5I-08oYpHriEipp4h8dgrSr8.roa (hash: Sudmmxuxp4Gm0euuCyvwJqn5dRNkNZeSNEf/mCRLjYc=) 16: zVSX18y8o4KRMFIOaBGobLqrbvA.roa (hash: zvGv7P9a7DP9g0eTnYWOdSqXm1zetmk1xuEUE1VYzlg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/c7ee9e-b5bf-4c2d-a983-dee3ed497aee/1/Ben8oKhYT-scEjGQcUIwYbCP5FY.crl rsync://rpki.ripe.net/repository/DEFAULT/bd/c7ee9e-b5bf-4c2d-a983-dee3ed497aee/1/Ben8oKhYT-scEjGQcUIwYbCP5FY.mft rsync://rpki.ripe.net/repository/DEFAULT/Ben8oKhYT-scEjGQcUIwYbCP5FY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 17 Apr 2026 22:00:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9d:98:4f:ec:61:89:9d:24:21:17:6d:c6:79:df:00:2b:c4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=05e9fca0a8584feb1c12319071423061b08fe456 Validity Not Before: Apr 16 22:01:07 2026 GMT Not After : Apr 17 22:01:07 2026 GMT Subject: CN=a049c70f79415e41174addbfd00a13d78d459f0f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:16:4d:e3:2d:38:31:37:86:c3:1f:ae:99:fa: 12:62:d3:52:69:cf:9d:31:03:4f:24:1f:50:be:a1: 98:d2:ea:73:62:d7:90:19:37:2c:69:05:75:ca:f5: 34:db:62:bf:a8:26:6f:b6:de:27:27:39:be:60:35: 6c:40:f3:6f:68:ee:bf:0d:5a:5f:46:d5:e5:17:4a: 8a:b3:6b:23:82:44:2f:da:c6:95:bd:66:5c:c2:57: e5:0d:06:5c:58:e4:9d:e5:e9:42:bb:d7:b6:01:a6: f2:13:dc:0c:1d:05:2f:4c:b1:0a:ef:a3:99:5e:24: 45:20:4d:47:d6:39:3f:75:1f:a6:de:3a:45:7a:e0: 97:69:0d:a1:e3:22:e0:fa:b3:e7:9b:d8:f2:77:c4: 66:ef:5a:d9:55:47:d2:1d:74:5b:93:30:51:72:1d: 9f:db:9e:e0:c0:16:0c:e3:47:5f:e0:f2:ba:8f:25: 38:49:a8:e4:7b:dd:a0:ea:93:10:cf:a7:c3:38:cf: 26:97:40:1b:ae:95:e1:42:7e:dd:10:32:e3:e9:99: 61:eb:a8:11:c7:a3:59:89:c7:19:0c:ec:da:d3:f5: b2:0d:03:69:4f:c6:09:33:6f:ab:3c:58:33:d2:1e: f0:92:9a:4e:cf:fd:d0:c5:77:5f:27:b2:36:94:0e: ab:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:49:C7:0F:79:41:5E:41:17:4A:DD:BF:D0:0A:13:D7:8D:45:9F:0F X509v3 Authority Key Identifier: keyid:05:E9:FC:A0:A8:58:4F:EB:1C:12:31:90:71:42:30:61:B0:8F:E4:56 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ben8oKhYT-scEjGQcUIwYbCP5FY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/c7ee9e-b5bf-4c2d-a983-dee3ed497aee/1/Ben8oKhYT-scEjGQcUIwYbCP5FY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/c7ee9e-b5bf-4c2d-a983-dee3ed497aee/1/Ben8oKhYT-scEjGQcUIwYbCP5FY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3f:92:83:23:02:8c:40:2a:17:10:58:91:04:5c:c2:e4:eb:93: 0b:7e:57:50:47:a5:cb:45:4f:c9:ad:78:8b:93:2c:a8:df:a1: db:fc:26:2a:57:c3:4d:78:4a:55:78:96:54:41:11:13:c9:9c: 93:71:95:86:00:3e:dd:6f:78:4b:cf:5a:68:81:2b:a5:af:2b: 8b:c2:2a:70:58:8d:0e:aa:cb:df:5a:f6:db:44:bc:55:da:54: 0a:18:33:f0:f2:1f:15:04:80:79:30:9f:0e:d0:22:54:d1:ba: 7b:6e:62:15:fd:5b:9b:21:24:89:2f:9b:ac:07:b8:42:17:27: 1b:4a:b0:40:ef:34:6a:3c:6a:c8:6c:6a:d7:30:99:b8:6f:72: 95:c2:b5:f3:25:b0:91:8f:0d:f3:21:93:42:e2:8a:6a:0f:25: dc:75:c3:63:e7:96:8f:aa:8b:0c:60:50:c4:0a:d1:2e:ea:27: 54:e1:97:40:ed:6c:5b:4d:7b:5b:49:17:26:bc:28:86:86:27: e0:26:0b:05:f1:f5:0e:4d:c0:f4:68:ec:12:1a:2e:4b:80:8a: fd:03:3b:8b:97:f9:c5:96:4f:f2:2f:43:d3:61:56:c0:41:3d: 0c:ff:05:5c:a6:78:70:17:52:8f:c6:27:8f:16:d0:24:a9:73: 1e:ec:6e:c2 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ2YT+xhiZ0kIRdtxnnfACvEMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA1ZTlmY2EwYTg1ODRmZWIxYzEyMzE5MDcxNDIzMDYxYjA4 ZmU0NTYwHhcNMjYwNDE2MjIwMTA3WhcNMjYwNDE3MjIwMTA3WjAzMTEwLwYDVQQD EyhhMDQ5YzcwZjc5NDE1ZTQxMTc0YWRkYmZkMDBhMTNkNzhkNDU5ZjBmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvBZN4y04MTeGwx+umfoSYtNSac+d MQNPJB9QvqGY0upzYteQGTcsaQV1yvU022K/qCZvtt4nJzm+YDVsQPNvaO6/DVpf RtXlF0qKs2sjgkQv2saVvWZcwlflDQZcWOSd5elCu9e2AabyE9wMHQUvTLEK76OZ XiRFIE1H1jk/dR+m3jpFeuCXaQ2h4yLg+rPnm9jyd8Rm71rZVUfSHXRbkzBRch2f 257gwBYM40df4PK6jyU4Sajke92g6pMQz6fDOM8ml0AbrpXhQn7dEDLj6Zlh66gR x6NZiccZDOza0/WyDQNpT8YJM2+rPFgz0h7wkppOz/3QxXdfJ7I2lA6rkwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKBJxw95QV5BF0rdv9AKE9eNRZ8PMB8GA1UdIwQY MBaAFAXp/KCoWE/rHBIxkHFCMGGwj+RWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQmVuOG9LaFlULXNjRWpHUWNVSXdZYkNQNUZZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZC9jN2VlOWUtYjViZi00YzJkLWE5ODMt ZGVlM2VkNDk3YWVlLzEvQmVuOG9LaFlULXNjRWpHUWNVSXdZYkNQNUZZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iZC9jN2VlOWUtYjViZi00YzJkLWE5ODMtZGVlM2VkNDk3YWVl LzEvQmVuOG9LaFlULXNjRWpHUWNVSXdZYkNQNUZZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAP5KDIwKM QCoXEFiRBFzC5OuTC35XUEely0VPya14i5MsqN+h2/wmKlfDTXhKVXiWVEERE8mc k3GVhgA+3W94S89aaIErpa8ri8IqcFiNDqrL31r220S8VdpUChgz8PIfFQSAeTCf DtAiVNG6e25iFf1bmyEkiS+brAe4QhcnG0qwQO80ajxqyGxq1zCZuG9ylcK18yWw kY8N8yGTQuKKag8l3HXDY+eWj6qLDGBQxArRLuonVOGXQO1sW017W0kXJrwohoYn 4CYLBfH1Dk3A9GjsEhouS4CK/QM7i5f5xZZP8i9D02FWwEE9DP8FXKZ4cBdSj8Yn jxbQJKlzHuxuwg== -----END CERTIFICATE-----Generated at Fri Apr 17 06:19:53 2026 by rpki-client