$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/c7ee9e-b5bf-4c2d-a983-dee3ed497aee/1/Ben8oKhYT-scEjGQcUIwYbCP5FY.mft File: Ben8oKhYT-scEjGQcUIwYbCP5FY.mft (raw, json) Hash identifier: ru7zFxo2un4vjRSMMP4dv0WU7q2pfraV6cs95cUHQ5U= Subject key identifier: 1B:B3:E2:36:C3:20:FB:B3:E1:FE:3F:64:0C:76:8E:A3:5F:FB:45:D2 Authority key identifier: 05:E9:FC:A0:A8:58:4F:EB:1C:12:31:90:71:42:30:61:B0:8F:E4:56 Certificate issuer: /CN=05e9fca0a8584feb1c12319071423061b08fe456 Certificate serial: 019EBE10E0DE3EC9C042332D0C330C54FD49 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ben8oKhYT-scEjGQcUIwYbCP5FY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/c7ee9e-b5bf-4c2d-a983-dee3ed497aee/1/Ben8oKhYT-scEjGQcUIwYbCP5FY.mft Manifest number: 116A Signing time: Fri 12 Jun 2026 23:00:37 +0000 Manifest this update: Fri 12 Jun 2026 23:00:37 +0000 Manifest next update: Sat 13 Jun 2026 23:00:37 +0000 Files and hashes: 1: 1-wzLZgHvoTtKlJUwiMWH2FcMG2Q.roa (hash: gecXtL6bXbTjxAwUSJNxs49kgp0JytqkT3osewNP9Tg=) 2: Ben8oKhYT-scEjGQcUIwYbCP5FY.crl (hash: 0jF28ZUizl8e7wWI761EudAa2r8upsLuZSj7B2QpNtE=) 3: K0Zub9dKWzCjs4OtkVc_n0LFVVw.roa (hash: WAtq4VjFyxJkBBrD+rRuoVlhMvETsjV5L4Bhvcl0PsU=) 4: L9TWZulmOgbRwrR8pCdihrCbfKY.roa (hash: kpba41p+9FSP2a4Hqmm3zRooFrFU9Uu5ujkaJiigN30=) 5: LyKLy6uT_WPlcRb0ykSf0GYdO4Y.roa (hash: Ws+t3EfpSQ+jlmW0/VstL/1QYYDtPwZDFVE4WDXtUAE=) 6: ML_7NS0uYkmp6GXXamZ3NSPsWOo.roa (hash: hnjHFSEUgTDrMvjlYwRL85H6sKIUA3yDjfvutZSmzgw=) 7: NMzuJZbxOy1LB40urUAindiN9YQ.roa (hash: BSKmMcbD/mOVfjihHJhWhwgJ1b6f29GirmFpN4Kj09M=) 8: YykfUYmRRbTXt94f_g0l_IynvDo.roa (hash: pI8Hi2Q8oLa5BZOGg0QPtqf72tmXIsLTGFmFi6JksGg=) 9: eMcTcCM26_FBi-jWPaQvXdFHm8Y.roa (hash: CN7UhMJ47ktIz/WCrZvYgOygWoLcj7OT337BtvDzxD8=) 10: f0VpgrAXaT3oVxZDOEU2iV1iNSY.roa (hash: iJgG1N6+Tuj84TVnx/5i89nDxTeYyLA4QQjr6o+oq3c=) 11: iYDni8VjNDDolmH_F5AAYHgrmp4.roa (hash: /oy9SLJqYCjuGSfbl4Oo1wvrMBYnNp3f2GJuXLzrOuo=) 12: jkeoRlUiAeo681KZqVdOpuHmKaA.roa (hash: lXnp/mWSzniqxvseJ8C7/Fc99Ljtz0HvIJlr2A2Qz1U=) 13: sZ0JiVG1Az1Dn7s8zECVmXzJnwo.roa (hash: 6tprys5RYcVu5F7SPPiEgBOyn1Agoq+HAa+NVM9JSXc=) 14: y_l5I-08oYpHriEipp4h8dgrSr8.roa (hash: Sudmmxuxp4Gm0euuCyvwJqn5dRNkNZeSNEf/mCRLjYc=) 15: zVSX18y8o4KRMFIOaBGobLqrbvA.roa (hash: zvGv7P9a7DP9g0eTnYWOdSqXm1zetmk1xuEUE1VYzlg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/c7ee9e-b5bf-4c2d-a983-dee3ed497aee/1/Ben8oKhYT-scEjGQcUIwYbCP5FY.crl rsync://rpki.ripe.net/repository/DEFAULT/bd/c7ee9e-b5bf-4c2d-a983-dee3ed497aee/1/Ben8oKhYT-scEjGQcUIwYbCP5FY.mft rsync://rpki.ripe.net/repository/DEFAULT/Ben8oKhYT-scEjGQcUIwYbCP5FY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 13 Jun 2026 23:00:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9e:be:10:e0:de:3e:c9:c0:42:33:2d:0c:33:0c:54:fd:49 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=05e9fca0a8584feb1c12319071423061b08fe456 Validity Not Before: Jun 12 23:00:37 2026 GMT Not After : Jun 13 23:00:37 2026 GMT Subject: CN=1bb3e236c320fbb3e1fe3f640c768ea35ffb45d2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:ca:9e:4c:6c:45:80:6e:34:f6:db:3d:52:ea: 69:fa:15:38:c8:94:8b:12:17:3c:6b:6d:37:ad:28: cc:ab:76:e4:a6:9f:4d:5f:6b:e7:10:aa:8c:9c:d4: 16:e1:25:cf:69:db:5e:2d:eb:c8:cd:55:b4:8d:34: 92:e2:fd:f4:07:fa:b1:75:60:82:b0:82:03:91:86: e1:f2:9c:73:b0:02:2d:cf:b7:ce:15:a1:4d:82:a0: 05:46:cc:c0:2d:d6:af:72:a0:93:54:26:3a:b1:26: 51:dd:37:b3:47:71:aa:19:7a:a5:39:e2:60:54:48: 8b:d1:7e:73:c9:c5:aa:25:11:72:cd:45:c7:aa:d4: 99:3a:05:b7:15:63:c7:52:ce:c1:75:f7:13:e8:f0: 43:30:b3:70:12:db:ea:0c:1e:46:45:5c:e2:57:d0: 90:a1:a4:b7:e3:67:3c:64:e7:5a:8c:db:62:fd:f2: 24:b3:f6:7f:2d:a2:af:77:86:eb:74:f2:f6:c1:b6: be:46:44:c0:f5:7f:e2:64:0a:68:fa:94:08:37:b9: ef:76:92:41:f5:2b:83:0b:f1:65:5d:d3:c2:d8:1d: ae:e7:8b:2b:34:2d:39:9d:77:5e:0f:74:dc:41:fb: 6b:84:02:c1:91:c7:68:4d:22:01:c9:92:a5:b8:4d: ba:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:B3:E2:36:C3:20:FB:B3:E1:FE:3F:64:0C:76:8E:A3:5F:FB:45:D2 X509v3 Authority Key Identifier: keyid:05:E9:FC:A0:A8:58:4F:EB:1C:12:31:90:71:42:30:61:B0:8F:E4:56 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ben8oKhYT-scEjGQcUIwYbCP5FY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/c7ee9e-b5bf-4c2d-a983-dee3ed497aee/1/Ben8oKhYT-scEjGQcUIwYbCP5FY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/c7ee9e-b5bf-4c2d-a983-dee3ed497aee/1/Ben8oKhYT-scEjGQcUIwYbCP5FY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ab:b8:1d:8b:41:45:b2:a6:46:ac:02:19:db:49:30:e1:2e:6c: 95:f1:7f:5d:58:d0:b8:d8:d1:62:af:96:98:05:d1:04:fc:a7: cd:c5:dc:74:6b:15:e9:58:45:26:87:9e:84:9a:34:4d:61:c1: b3:21:4e:2a:09:15:04:fb:1e:62:69:fe:e3:a4:5b:9e:40:69: ea:39:7a:5a:cd:78:91:c3:48:0d:80:e5:ab:a8:ad:bf:84:64: 3b:d2:8f:58:23:df:65:b9:1d:5b:e1:2d:64:a1:8b:92:42:c0: bd:cd:91:58:3a:78:9b:f2:56:79:50:d6:80:4b:53:1f:80:4e: df:69:b6:fe:2a:15:e6:c0:5a:79:d5:58:fa:e8:9f:5a:9b:89: 9f:19:4a:a3:33:0d:2c:a8:6a:79:fc:c4:4e:39:46:0d:83:35: c3:41:71:73:1e:ad:bf:02:8e:b4:53:6e:4f:76:9b:c6:bd:5b: 70:82:08:ef:3b:27:f7:9b:03:97:bf:f5:18:43:84:33:2a:3b: ef:d5:b0:4e:64:21:fd:1b:97:44:8f:47:f7:a5:11:84:29:13: 32:3f:ec:68:bf:51:48:67:4f:d0:20:5a:e7:2f:dc:77:0c:48: d3:a9:bb:6e:97:ba:1e:fb:e3:7c:25:9d:a9:93:78:d3:c0:b2: fa:80:c7:80 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ6+EODePsnAQjMtDDMMVP1JMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA1ZTlmY2EwYTg1ODRmZWIxYzEyMzE5MDcxNDIzMDYxYjA4 ZmU0NTYwHhcNMjYwNjEyMjMwMDM3WhcNMjYwNjEzMjMwMDM3WjAzMTEwLwYDVQQD EygxYmIzZTIzNmMzMjBmYmIzZTFmZTNmNjQwYzc2OGVhMzVmZmI0NWQyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAosqeTGxFgG409ts9Uupp+hU4yJSL Ehc8a203rSjMq3bkpp9NX2vnEKqMnNQW4SXPadteLevIzVW0jTSS4v30B/qxdWCC sIIDkYbh8pxzsAItz7fOFaFNgqAFRszALdavcqCTVCY6sSZR3TezR3GqGXqlOeJg VEiL0X5zycWqJRFyzUXHqtSZOgW3FWPHUs7BdfcT6PBDMLNwEtvqDB5GRVziV9CQ oaS342c8ZOdajNti/fIks/Z/LaKvd4brdPL2wba+RkTA9X/iZApo+pQIN7nvdpJB 9SuDC/FlXdPC2B2u54srNC05nXdeD3TcQftrhALBkcdoTSIByZKluE26FQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBuz4jbDIPuz4f4/ZAx2jqNf+0XSMB8GA1UdIwQY MBaAFAXp/KCoWE/rHBIxkHFCMGGwj+RWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQmVuOG9LaFlULXNjRWpHUWNVSXdZYkNQNUZZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZC9jN2VlOWUtYjViZi00YzJkLWE5ODMt ZGVlM2VkNDk3YWVlLzEvQmVuOG9LaFlULXNjRWpHUWNVSXdZYkNQNUZZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iZC9jN2VlOWUtYjViZi00YzJkLWE5ODMtZGVlM2VkNDk3YWVl LzEvQmVuOG9LaFlULXNjRWpHUWNVSXdZYkNQNUZZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAq7gdi0FF sqZGrAIZ20kw4S5slfF/XVjQuNjRYq+WmAXRBPynzcXcdGsV6VhFJoeehJo0TWHB syFOKgkVBPseYmn+46RbnkBp6jl6Ws14kcNIDYDlq6itv4RkO9KPWCPfZbkdW+Et ZKGLkkLAvc2RWDp4m/JWeVDWgEtTH4BO32m2/ioV5sBaedVY+uifWpuJnxlKozMN LKhqefzETjlGDYM1w0Fxcx6tvwKOtFNuT3abxr1bcIII7zsn95sDl7/1GEOEMyo7 79WwTmQh/RuXRI9H96URhCkTMj/saL9RSGdP0CBa5y/cdwxI06m7bpe6HvvjfCWd qZN408Cy+oDHgA== -----END CERTIFICATE-----Generated at Sat Jun 13 09:29:41 2026 by rpki-client