$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/c7ee9e-b5bf-4c2d-a983-dee3ed497aee/1/Ben8oKhYT-scEjGQcUIwYbCP5FY.mft File: Ben8oKhYT-scEjGQcUIwYbCP5FY.mft (raw, json) Hash identifier: TnzbiKdh/Cxtrdt4ZtM0eaehTvsg2uNqNfHssunKunA= Subject key identifier: 74:6C:F2:FF:10:BE:8A:55:D9:C6:CA:5D:B2:1C:06:D3:8C:37:1F:70 Authority key identifier: 05:E9:FC:A0:A8:58:4F:EB:1C:12:31:90:71:42:30:61:B0:8F:E4:56 Certificate issuer: /CN=05e9fca0a8584feb1c12319071423061b08fe456 Certificate serial: 019FA9AC32D0C074869FA01AF0AF091BB41E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ben8oKhYT-scEjGQcUIwYbCP5FY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/c7ee9e-b5bf-4c2d-a983-dee3ed497aee/1/Ben8oKhYT-scEjGQcUIwYbCP5FY.mft Manifest number: 11E4 Signing time: Tue 28 Jul 2026 17:01:02 +0000 Manifest this update: Tue 28 Jul 2026 17:01:02 +0000 Manifest next update: Wed 29 Jul 2026 17:01:02 +0000 Files and hashes: 1: 1-wzLZgHvoTtKlJUwiMWH2FcMG2Q.roa (hash: gecXtL6bXbTjxAwUSJNxs49kgp0JytqkT3osewNP9Tg=) 2: Ben8oKhYT-scEjGQcUIwYbCP5FY.crl (hash: gqcCaql2SuGwqN8OL5UakzZZrAKq85Apf4JiXPYXe/c=) 3: K0Zub9dKWzCjs4OtkVc_n0LFVVw.roa (hash: WAtq4VjFyxJkBBrD+rRuoVlhMvETsjV5L4Bhvcl0PsU=) 4: L9TWZulmOgbRwrR8pCdihrCbfKY.roa (hash: kpba41p+9FSP2a4Hqmm3zRooFrFU9Uu5ujkaJiigN30=) 5: LyKLy6uT_WPlcRb0ykSf0GYdO4Y.roa (hash: Ws+t3EfpSQ+jlmW0/VstL/1QYYDtPwZDFVE4WDXtUAE=) 6: ML_7NS0uYkmp6GXXamZ3NSPsWOo.roa (hash: hnjHFSEUgTDrMvjlYwRL85H6sKIUA3yDjfvutZSmzgw=) 7: NMzuJZbxOy1LB40urUAindiN9YQ.roa (hash: BSKmMcbD/mOVfjihHJhWhwgJ1b6f29GirmFpN4Kj09M=) 8: YykfUYmRRbTXt94f_g0l_IynvDo.roa (hash: pI8Hi2Q8oLa5BZOGg0QPtqf72tmXIsLTGFmFi6JksGg=) 9: eMcTcCM26_FBi-jWPaQvXdFHm8Y.roa (hash: CN7UhMJ47ktIz/WCrZvYgOygWoLcj7OT337BtvDzxD8=) 10: f0VpgrAXaT3oVxZDOEU2iV1iNSY.roa (hash: iJgG1N6+Tuj84TVnx/5i89nDxTeYyLA4QQjr6o+oq3c=) 11: iYDni8VjNDDolmH_F5AAYHgrmp4.roa (hash: /oy9SLJqYCjuGSfbl4Oo1wvrMBYnNp3f2GJuXLzrOuo=) 12: jkeoRlUiAeo681KZqVdOpuHmKaA.roa (hash: lXnp/mWSzniqxvseJ8C7/Fc99Ljtz0HvIJlr2A2Qz1U=) 13: sZ0JiVG1Az1Dn7s8zECVmXzJnwo.roa (hash: 6tprys5RYcVu5F7SPPiEgBOyn1Agoq+HAa+NVM9JSXc=) 14: y_l5I-08oYpHriEipp4h8dgrSr8.roa (hash: Sudmmxuxp4Gm0euuCyvwJqn5dRNkNZeSNEf/mCRLjYc=) 15: zVSX18y8o4KRMFIOaBGobLqrbvA.roa (hash: zvGv7P9a7DP9g0eTnYWOdSqXm1zetmk1xuEUE1VYzlg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/c7ee9e-b5bf-4c2d-a983-dee3ed497aee/1/Ben8oKhYT-scEjGQcUIwYbCP5FY.crl rsync://rpki.ripe.net/repository/DEFAULT/bd/c7ee9e-b5bf-4c2d-a983-dee3ed497aee/1/Ben8oKhYT-scEjGQcUIwYbCP5FY.mft rsync://rpki.ripe.net/repository/DEFAULT/Ben8oKhYT-scEjGQcUIwYbCP5FY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 29 Jul 2026 14:18:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9f:a9:ac:32:d0:c0:74:86:9f:a0:1a:f0:af:09:1b:b4:1e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=05e9fca0a8584feb1c12319071423061b08fe456 Validity Not Before: Jul 28 17:01:02 2026 GMT Not After : Jul 29 17:01:02 2026 GMT Subject: CN=746cf2ff10be8a55d9c6ca5db21c06d38c371f70 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:fd:52:ce:0c:0a:a9:b7:07:11:7e:49:db:f7:39: 07:dd:c0:a6:ab:14:7a:fd:b0:5f:dd:3a:7a:b2:12: 7a:18:27:63:6e:3d:1f:68:2a:f0:08:ce:86:10:71: b0:ca:5b:fa:07:fc:a2:ef:b4:1e:bc:8a:7c:cd:f6: a4:ee:5b:cd:96:be:86:6b:b2:6d:29:4e:f6:d2:7b: 85:cf:6c:94:11:6b:fd:35:87:db:6a:da:23:a2:60: 2c:4e:70:06:b9:c4:e6:83:1f:35:fc:86:37:05:1b: 64:ae:10:24:ee:be:8f:72:10:75:98:6b:54:4f:96: 2e:99:9e:62:7b:85:70:58:d0:87:32:52:6d:69:80: ec:a1:84:40:be:85:be:49:c6:b0:3c:43:f1:cc:55: b6:a4:2c:7e:76:34:8e:d9:8e:99:be:77:64:52:07: 70:2c:a6:d9:e4:11:b8:40:2d:94:a0:e7:7b:76:f5: 68:d2:80:a1:1b:2e:b3:8c:db:83:72:00:3c:95:6f: 64:4a:1a:3d:f3:d4:be:90:db:a3:98:a8:04:9f:93: 50:cc:68:12:bd:48:4b:84:2f:06:82:82:6f:91:4b: d8:7e:c0:a7:43:01:db:e2:b1:8a:63:3f:36:5b:d8: 6b:75:83:26:e9:e7:25:1d:f8:c7:dc:a4:c1:b0:8e: 9f:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:6C:F2:FF:10:BE:8A:55:D9:C6:CA:5D:B2:1C:06:D3:8C:37:1F:70 X509v3 Authority Key Identifier: keyid:05:E9:FC:A0:A8:58:4F:EB:1C:12:31:90:71:42:30:61:B0:8F:E4:56 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ben8oKhYT-scEjGQcUIwYbCP5FY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/c7ee9e-b5bf-4c2d-a983-dee3ed497aee/1/Ben8oKhYT-scEjGQcUIwYbCP5FY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/c7ee9e-b5bf-4c2d-a983-dee3ed497aee/1/Ben8oKhYT-scEjGQcUIwYbCP5FY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a0:16:08:d5:40:c6:12:24:5f:e8:68:c5:d5:6b:60:89:17:a5: 3b:2c:21:ce:6d:67:f5:af:96:ae:db:ac:a3:2d:a6:7f:61:39: 65:b5:03:10:f1:9a:6a:a1:d7:d2:fb:69:fc:01:c8:f7:59:65: 0c:4f:8f:09:0a:fd:c1:61:32:76:f7:7b:e2:d7:b1:85:18:bf: 8d:3d:a0:04:a2:d2:c8:42:d2:01:82:65:6f:f1:ee:62:e4:b5: 21:3c:cb:5e:ac:38:b0:a2:97:2f:51:38:e8:5c:8b:0c:d7:2b: 9a:ec:03:29:c2:4c:8b:9c:63:33:90:e4:12:c0:b8:23:38:10: 0a:db:8f:a2:07:b4:af:c3:a7:b3:0a:60:c1:4a:a2:3e:2a:22: 39:f0:5e:dc:42:35:49:32:ba:4f:e7:ae:fb:02:14:9b:a0:46: 42:97:4a:64:d6:ec:a3:4c:df:f1:b8:4f:5f:43:54:1a:38:69: ea:a2:0c:ce:58:fe:2c:98:8c:1f:f2:9d:3c:ad:00:70:25:c9: af:64:04:da:6e:90:fa:a9:77:5b:52:ba:7f:2e:62:38:40:27: 0b:4e:c9:d0:bb:f4:cd:d2:2f:0f:c6:44:c2:85:de:cc:d2:ce: 8a:bc:33:a1:1d:bd:1b:a4:81:95:3b:84:11:74:02:e2:cd:91: 28:dc:a5:66 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ+prDLQwHSGn6Aa8K8JG7QeMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA1ZTlmY2EwYTg1ODRmZWIxYzEyMzE5MDcxNDIzMDYxYjA4 ZmU0NTYwHhcNMjYwNzI4MTcwMTAyWhcNMjYwNzI5MTcwMTAyWjAzMTEwLwYDVQQD Eyg3NDZjZjJmZjEwYmU4YTU1ZDljNmNhNWRiMjFjMDZkMzhjMzcxZjcwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA/VLODAqptwcRfknb9zkH3cCmqxR6 /bBf3Tp6shJ6GCdjbj0faCrwCM6GEHGwylv6B/yi77QevIp8zfak7lvNlr6Ga7Jt KU720nuFz2yUEWv9NYfbatojomAsTnAGucTmgx81/IY3BRtkrhAk7r6PchB1mGtU T5YumZ5ie4VwWNCHMlJtaYDsoYRAvoW+ScawPEPxzFW2pCx+djSO2Y6ZvndkUgdw LKbZ5BG4QC2UoOd7dvVo0oChGy6zjNuDcgA8lW9kSho989S+kNujmKgEn5NQzGgS vUhLhC8GgoJvkUvYfsCnQwHb4rGKYz82W9hrdYMm6eclHfjH3KTBsI6fAwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHRs8v8QvopV2cbKXbIcBtOMNx9wMB8GA1UdIwQY MBaAFAXp/KCoWE/rHBIxkHFCMGGwj+RWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQmVuOG9LaFlULXNjRWpHUWNVSXdZYkNQNUZZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZC9jN2VlOWUtYjViZi00YzJkLWE5ODMt ZGVlM2VkNDk3YWVlLzEvQmVuOG9LaFlULXNjRWpHUWNVSXdZYkNQNUZZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iZC9jN2VlOWUtYjViZi00YzJkLWE5ODMtZGVlM2VkNDk3YWVl LzEvQmVuOG9LaFlULXNjRWpHUWNVSXdZYkNQNUZZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAoBYI1UDG EiRf6GjF1WtgiRelOywhzm1n9a+Wrtusoy2mf2E5ZbUDEPGaaqHX0vtp/AHI91ll DE+PCQr9wWEydvd74texhRi/jT2gBKLSyELSAYJlb/HuYuS1ITzLXqw4sKKXL1E4 6FyLDNcrmuwDKcJMi5xjM5DkEsC4IzgQCtuPoge0r8OnswpgwUqiPioiOfBe3EI1 STK6T+eu+wIUm6BGQpdKZNbso0zf8bhPX0NUGjhp6qIMzlj+LJiMH/KdPK0AcCXJ r2QE2m6Q+ql3W1K6fy5iOEAnC07J0Lv0zdIvD8ZEwoXezNLOirwzoR29G6SBlTuE EXQC4s2RKNylZg== -----END CERTIFICATE-----Generated at Tue Jul 28 19:24:59 2026 by rpki-client