$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/c7ee9e-b5bf-4c2d-a983-dee3ed497aee/1/Ben8oKhYT-scEjGQcUIwYbCP5FY.mft File: Ben8oKhYT-scEjGQcUIwYbCP5FY.mft (raw, json) Hash identifier: USCO1swkaTKoIw9KRXOmNHyTZXH7K/hJsfYe6wC8j/g= Subject key identifier: 95:A2:36:73:BC:6F:CB:12:9D:8C:F0:3B:DA:44:56:13:16:FF:6D:46 Authority key identifier: 05:E9:FC:A0:A8:58:4F:EB:1C:12:31:90:71:42:30:61:B0:8F:E4:56 Certificate issuer: /CN=05e9fca0a8584feb1c12319071423061b08fe456 Certificate serial: 019CAAC6D2F893419D756D3995199B2EAD95 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ben8oKhYT-scEjGQcUIwYbCP5FY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/c7ee9e-b5bf-4c2d-a983-dee3ed497aee/1/Ben8oKhYT-scEjGQcUIwYbCP5FY.mft Manifest number: 1056 Signing time: Sun 01 Mar 2026 19:01:22 +0000 Manifest this update: Sun 01 Mar 2026 19:01:22 +0000 Manifest next update: Mon 02 Mar 2026 19:01:22 +0000 Files and hashes: 1: 1-wzLZgHvoTtKlJUwiMWH2FcMG2Q.roa (hash: gecXtL6bXbTjxAwUSJNxs49kgp0JytqkT3osewNP9Tg=) 2: Ben8oKhYT-scEjGQcUIwYbCP5FY.crl (hash: rgWEOV1PRDArsFdiqV6utyS4OED4lHiOyCjkSgB5ydc=) 3: IgX0yg7OLyE1FEmaOzvAFNwec_c.roa (hash: sizb6eBcughEhem8l1JDf+pWnplrlybiAHwSKXoLMaY=) 4: K0Zub9dKWzCjs4OtkVc_n0LFVVw.roa (hash: WAtq4VjFyxJkBBrD+rRuoVlhMvETsjV5L4Bhvcl0PsU=) 5: L9TWZulmOgbRwrR8pCdihrCbfKY.roa (hash: kpba41p+9FSP2a4Hqmm3zRooFrFU9Uu5ujkaJiigN30=) 6: LyKLy6uT_WPlcRb0ykSf0GYdO4Y.roa (hash: Ws+t3EfpSQ+jlmW0/VstL/1QYYDtPwZDFVE4WDXtUAE=) 7: ML_7NS0uYkmp6GXXamZ3NSPsWOo.roa (hash: hnjHFSEUgTDrMvjlYwRL85H6sKIUA3yDjfvutZSmzgw=) 8: NMzuJZbxOy1LB40urUAindiN9YQ.roa (hash: BSKmMcbD/mOVfjihHJhWhwgJ1b6f29GirmFpN4Kj09M=) 9: YykfUYmRRbTXt94f_g0l_IynvDo.roa (hash: pI8Hi2Q8oLa5BZOGg0QPtqf72tmXIsLTGFmFi6JksGg=) 10: cyPQOcdzS_4SfdQdVz0CqSZMdww.roa (hash: 0WNUn7RLirYyARkbquAfInmWqcScy7Jj0jC1hD9xaio=) 11: f0VpgrAXaT3oVxZDOEU2iV1iNSY.roa (hash: iJgG1N6+Tuj84TVnx/5i89nDxTeYyLA4QQjr6o+oq3c=) 12: iYDni8VjNDDolmH_F5AAYHgrmp4.roa (hash: /oy9SLJqYCjuGSfbl4Oo1wvrMBYnNp3f2GJuXLzrOuo=) 13: jkeoRlUiAeo681KZqVdOpuHmKaA.roa (hash: lXnp/mWSzniqxvseJ8C7/Fc99Ljtz0HvIJlr2A2Qz1U=) 14: sZ0JiVG1Az1Dn7s8zECVmXzJnwo.roa (hash: 6tprys5RYcVu5F7SPPiEgBOyn1Agoq+HAa+NVM9JSXc=) 15: y_l5I-08oYpHriEipp4h8dgrSr8.roa (hash: Sudmmxuxp4Gm0euuCyvwJqn5dRNkNZeSNEf/mCRLjYc=) 16: zVSX18y8o4KRMFIOaBGobLqrbvA.roa (hash: zvGv7P9a7DP9g0eTnYWOdSqXm1zetmk1xuEUE1VYzlg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/c7ee9e-b5bf-4c2d-a983-dee3ed497aee/1/Ben8oKhYT-scEjGQcUIwYbCP5FY.crl rsync://rpki.ripe.net/repository/DEFAULT/bd/c7ee9e-b5bf-4c2d-a983-dee3ed497aee/1/Ben8oKhYT-scEjGQcUIwYbCP5FY.mft rsync://rpki.ripe.net/repository/DEFAULT/Ben8oKhYT-scEjGQcUIwYbCP5FY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 02 Mar 2026 15:00:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:aa:c6:d2:f8:93:41:9d:75:6d:39:95:19:9b:2e:ad:95 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=05e9fca0a8584feb1c12319071423061b08fe456 Validity Not Before: Mar 1 19:01:22 2026 GMT Not After : Mar 2 19:01:22 2026 GMT Subject: CN=95a23673bc6fcb129d8cf03bda44561316ff6d46 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:ca:fe:6e:a7:18:96:ea:0e:2f:b3:76:0f:97: 57:4b:3e:78:60:af:36:ad:75:12:72:b8:39:4f:c1: e5:a9:d6:75:f9:2f:20:5f:29:61:77:07:05:5d:4f: 5f:7a:35:d5:36:c3:ba:e3:47:63:18:b4:32:82:ff: b2:1a:bb:91:3c:46:94:86:9b:f9:95:18:1e:d1:13: a1:a8:de:d3:e0:c1:0c:36:03:6b:6f:be:63:24:32: 77:43:67:ba:a5:29:80:2f:96:27:df:91:13:70:b5: 1d:4f:75:e4:62:68:48:a6:3e:85:f5:62:b0:af:3d: 9a:71:32:ef:8a:ba:5d:3b:54:c7:d8:e3:49:36:30: 07:6f:22:e6:a6:39:9f:76:e2:11:d3:30:80:30:b1: ee:34:f0:fc:3c:64:b5:58:fc:a3:c3:63:02:52:1f: 81:11:ac:63:b9:27:c4:9f:12:28:e2:76:fd:a7:df: 03:da:82:51:45:e9:81:59:6d:38:41:32:8e:d7:d8: 97:fb:b8:28:b6:c9:b1:7c:cc:e4:b4:25:5c:81:b5: be:9d:b0:d5:75:ce:0b:c0:74:29:93:a7:00:f5:04: 3e:f3:fb:06:25:9f:2f:c7:2b:dd:64:b9:77:55:19: c2:8b:d8:2a:38:97:6c:7e:d2:a8:70:1c:a2:0a:ef: e6:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:A2:36:73:BC:6F:CB:12:9D:8C:F0:3B:DA:44:56:13:16:FF:6D:46 X509v3 Authority Key Identifier: keyid:05:E9:FC:A0:A8:58:4F:EB:1C:12:31:90:71:42:30:61:B0:8F:E4:56 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ben8oKhYT-scEjGQcUIwYbCP5FY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/c7ee9e-b5bf-4c2d-a983-dee3ed497aee/1/Ben8oKhYT-scEjGQcUIwYbCP5FY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/c7ee9e-b5bf-4c2d-a983-dee3ed497aee/1/Ben8oKhYT-scEjGQcUIwYbCP5FY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2e:16:e9:96:18:72:1f:8d:3d:84:b0:6d:23:d8:c5:74:07:0a: 47:7f:5d:2e:cc:3d:55:33:5f:59:45:d7:96:2b:c4:9c:2c:9d: 88:86:ee:87:71:86:43:6f:a8:49:8f:8d:f3:e5:4c:95:09:ef: 06:08:7e:64:3a:ad:36:0a:f9:74:b6:a8:71:4a:1d:2d:07:06: b2:6c:5f:f5:2c:15:b7:a7:b1:5b:37:c8:26:86:3e:8e:c4:72: f8:85:1c:9e:01:c3:67:18:ab:f4:2f:a4:12:90:2a:11:62:2f: d6:f7:1c:bc:a8:11:e8:6c:45:9f:c4:cd:c7:22:09:ce:fb:ab: a7:af:8e:c1:75:9a:16:50:e7:73:9a:f4:2d:f8:42:7c:e1:c5: d7:0d:fd:33:7f:03:e2:6f:27:61:28:54:9c:96:99:e8:5f:dc: 52:24:5c:3e:0d:65:ac:86:e0:4c:a2:f5:0e:ad:43:1d:06:82: 38:1d:96:4a:62:c1:b6:75:5e:c4:d3:0e:96:25:2b:5c:48:81: 39:ba:9a:b9:47:7d:84:9f:8c:76:85:2b:66:8b:45:57:d0:a2: 53:01:b9:32:e4:8f:fc:dc:15:8f:7d:52:56:7c:44:7c:23:b0: c8:e2:e0:1e:56:57:b7:fa:5f:a2:80:83:2d:7a:f9:10:89:53: 9a:ba:40:71 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZyqxtL4k0GddW05lRmbLq2VMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA1ZTlmY2EwYTg1ODRmZWIxYzEyMzE5MDcxNDIzMDYxYjA4 ZmU0NTYwHhcNMjYwMzAxMTkwMTIyWhcNMjYwMzAyMTkwMTIyWjAzMTEwLwYDVQQD Eyg5NWEyMzY3M2JjNmZjYjEyOWQ4Y2YwM2JkYTQ0NTYxMzE2ZmY2ZDQ2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmsr+bqcYluoOL7N2D5dXSz54YK82 rXUScrg5T8HlqdZ1+S8gXylhdwcFXU9fejXVNsO640djGLQygv+yGruRPEaUhpv5 lRge0ROhqN7T4MEMNgNrb75jJDJ3Q2e6pSmAL5Yn35ETcLUdT3XkYmhIpj6F9WKw rz2acTLvirpdO1TH2ONJNjAHbyLmpjmfduIR0zCAMLHuNPD8PGS1WPyjw2MCUh+B EaxjuSfEnxIo4nb9p98D2oJRRemBWW04QTKO19iX+7gotsmxfMzktCVcgbW+nbDV dc4LwHQpk6cA9QQ+8/sGJZ8vxyvdZLl3VRnCi9gqOJdsftKocByiCu/m5QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJWiNnO8b8sSnYzwO9pEVhMW/21GMB8GA1UdIwQY MBaAFAXp/KCoWE/rHBIxkHFCMGGwj+RWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQmVuOG9LaFlULXNjRWpHUWNVSXdZYkNQNUZZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZC9jN2VlOWUtYjViZi00YzJkLWE5ODMt ZGVlM2VkNDk3YWVlLzEvQmVuOG9LaFlULXNjRWpHUWNVSXdZYkNQNUZZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iZC9jN2VlOWUtYjViZi00YzJkLWE5ODMtZGVlM2VkNDk3YWVl LzEvQmVuOG9LaFlULXNjRWpHUWNVSXdZYkNQNUZZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALhbplhhy H409hLBtI9jFdAcKR39dLsw9VTNfWUXXlivEnCydiIbuh3GGQ2+oSY+N8+VMlQnv Bgh+ZDqtNgr5dLaocUodLQcGsmxf9SwVt6exWzfIJoY+jsRy+IUcngHDZxir9C+k EpAqEWIv1vccvKgR6GxFn8TNxyIJzvurp6+OwXWaFlDnc5r0LfhCfOHF1w39M38D 4m8nYShUnJaZ6F/cUiRcPg1lrIbgTKL1Dq1DHQaCOB2WSmLBtnVexNMOliUrXEiB ObqauUd9hJ+MdoUrZotFV9CiUwG5MuSP/NwVj31SVnxEfCOwyOLgHlZXt/pfooCD LXr5EIlTmrpAcQ== -----END CERTIFICATE-----Generated at Mon Mar 2 01:47:03 2026 by rpki-client