$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/bd/c7ee9e-b5bf-4c2d-a983-dee3ed497aee/1/Ben8oKhYT-scEjGQcUIwYbCP5FY.mft File: Ben8oKhYT-scEjGQcUIwYbCP5FY.mft (raw, json) Hash identifier: Kk5lk515cH9/U7F891T9lACWah/A/OrWFEBEh+QbhdA= Subject key identifier: C1:11:CA:CF:62:3A:57:E8:B6:6A:22:C4:98:CB:AB:DC:7A:FD:E3:24 Authority key identifier: 05:E9:FC:A0:A8:58:4F:EB:1C:12:31:90:71:42:30:61:B0:8F:E4:56 Certificate issuer: /CN=05e9fca0a8584feb1c12319071423061b08fe456 Certificate serial: 01A0BFC331B3E2B587B43986A85ADA924B23 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ben8oKhYT-scEjGQcUIwYbCP5FY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/c7ee9e-b5bf-4c2d-a983-dee3ed497aee/1/Ben8oKhYT-scEjGQcUIwYbCP5FY.mft Manifest number: 1274 Signing time: Sun 20 Sep 2026 17:00:35 +0000 Manifest this update: Sun 20 Sep 2026 17:00:35 +0000 Manifest next update: Mon 21 Sep 2026 17:00:35 +0000 Files and hashes: 1: 1-wzLZgHvoTtKlJUwiMWH2FcMG2Q.roa (hash: gecXtL6bXbTjxAwUSJNxs49kgp0JytqkT3osewNP9Tg=) 2: Ben8oKhYT-scEjGQcUIwYbCP5FY.crl (hash: l4D52EGVWrLLgaUbLx+JNOvWIo9+k2rdKY22kwcBDhs=) 3: K0Zub9dKWzCjs4OtkVc_n0LFVVw.roa (hash: WAtq4VjFyxJkBBrD+rRuoVlhMvETsjV5L4Bhvcl0PsU=) 4: L9TWZulmOgbRwrR8pCdihrCbfKY.roa (hash: kpba41p+9FSP2a4Hqmm3zRooFrFU9Uu5ujkaJiigN30=) 5: LyKLy6uT_WPlcRb0ykSf0GYdO4Y.roa (hash: Ws+t3EfpSQ+jlmW0/VstL/1QYYDtPwZDFVE4WDXtUAE=) 6: ML_7NS0uYkmp6GXXamZ3NSPsWOo.roa (hash: hnjHFSEUgTDrMvjlYwRL85H6sKIUA3yDjfvutZSmzgw=) 7: NMzuJZbxOy1LB40urUAindiN9YQ.roa (hash: BSKmMcbD/mOVfjihHJhWhwgJ1b6f29GirmFpN4Kj09M=) 8: YykfUYmRRbTXt94f_g0l_IynvDo.roa (hash: pI8Hi2Q8oLa5BZOGg0QPtqf72tmXIsLTGFmFi6JksGg=) 9: eMcTcCM26_FBi-jWPaQvXdFHm8Y.roa (hash: CN7UhMJ47ktIz/WCrZvYgOygWoLcj7OT337BtvDzxD8=) 10: f0VpgrAXaT3oVxZDOEU2iV1iNSY.roa (hash: iJgG1N6+Tuj84TVnx/5i89nDxTeYyLA4QQjr6o+oq3c=) 11: iYDni8VjNDDolmH_F5AAYHgrmp4.roa (hash: /oy9SLJqYCjuGSfbl4Oo1wvrMBYnNp3f2GJuXLzrOuo=) 12: jkeoRlUiAeo681KZqVdOpuHmKaA.roa (hash: lXnp/mWSzniqxvseJ8C7/Fc99Ljtz0HvIJlr2A2Qz1U=) 13: sZ0JiVG1Az1Dn7s8zECVmXzJnwo.roa (hash: 6tprys5RYcVu5F7SPPiEgBOyn1Agoq+HAa+NVM9JSXc=) 14: y_l5I-08oYpHriEipp4h8dgrSr8.roa (hash: Sudmmxuxp4Gm0euuCyvwJqn5dRNkNZeSNEf/mCRLjYc=) 15: zVSX18y8o4KRMFIOaBGobLqrbvA.roa (hash: zvGv7P9a7DP9g0eTnYWOdSqXm1zetmk1xuEUE1VYzlg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/c7ee9e-b5bf-4c2d-a983-dee3ed497aee/1/Ben8oKhYT-scEjGQcUIwYbCP5FY.crl rsync://rpki.ripe.net/repository/DEFAULT/bd/c7ee9e-b5bf-4c2d-a983-dee3ed497aee/1/Ben8oKhYT-scEjGQcUIwYbCP5FY.mft rsync://rpki.ripe.net/repository/DEFAULT/Ben8oKhYT-scEjGQcUIwYbCP5FY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 21 Sep 2026 14:00:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a0:bf:c3:31:b3:e2:b5:87:b4:39:86:a8:5a:da:92:4b:23 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=05e9fca0a8584feb1c12319071423061b08fe456 Validity Not Before: Sep 20 17:00:35 2026 GMT Not After : Sep 21 17:00:35 2026 GMT Subject: CN=c111cacf623a57e8b66a22c498cbabdc7afde324 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:72:a4:63:53:04:0a:1a:01:eb:36:de:68:92: c0:8e:e8:be:2a:1c:d9:65:33:bf:1e:92:58:24:5d: 9c:14:9f:4c:66:07:41:8d:6e:a6:67:41:8a:92:20: 06:0a:b8:2f:7e:22:e3:13:63:05:c4:80:38:bf:07: e2:4b:b8:7f:eb:90:ff:07:71:91:b5:2f:1c:d2:4d: 4d:38:09:4b:c6:59:ee:58:a1:11:81:30:0c:9e:63: bd:34:c4:96:b9:12:45:f4:db:41:cb:eb:a9:21:0f: 1a:b6:e8:0a:b7:d4:8c:60:13:c0:24:1b:fc:20:24: 84:dd:c1:8a:12:1b:75:5a:55:b6:f6:32:c1:c9:9e: 19:79:9c:d7:25:f1:d5:24:a2:bb:50:f6:ae:2c:7c: 62:08:e2:a3:63:10:8e:04:0f:b7:63:b6:67:36:c2: 5d:b6:fa:76:75:2c:61:2d:f1:6b:d3:5f:25:19:a5: d5:71:d6:f9:2b:a3:88:40:83:65:47:01:54:b6:b9: 60:12:c8:9d:ea:0d:9c:3f:fe:d2:8a:56:0a:18:f9: 46:6f:f0:6c:94:d6:28:99:62:e1:df:f5:bf:a5:c0: 9a:92:9b:dd:62:2e:f0:3a:c6:f3:5c:f5:6a:36:56: 33:80:c2:ff:3f:90:fc:c7:1f:40:af:c5:f0:dc:e7: 77:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:11:CA:CF:62:3A:57:E8:B6:6A:22:C4:98:CB:AB:DC:7A:FD:E3:24 X509v3 Authority Key Identifier: keyid:05:E9:FC:A0:A8:58:4F:EB:1C:12:31:90:71:42:30:61:B0:8F:E4:56 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ben8oKhYT-scEjGQcUIwYbCP5FY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/c7ee9e-b5bf-4c2d-a983-dee3ed497aee/1/Ben8oKhYT-scEjGQcUIwYbCP5FY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/c7ee9e-b5bf-4c2d-a983-dee3ed497aee/1/Ben8oKhYT-scEjGQcUIwYbCP5FY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 80:b0:ea:df:84:63:9f:2b:b0:8c:8f:bb:7e:be:10:0f:49:8f: 78:d0:ef:a2:49:72:d5:23:2e:8f:e5:f3:23:82:c6:d1:e0:7c: c3:76:35:7e:3b:9f:fe:94:de:59:29:12:80:60:e6:d2:5c:4e: 05:b0:55:94:8e:1c:cb:8a:ac:da:e6:31:fe:ea:56:d8:55:74: 57:8f:1b:26:38:73:12:4f:f4:05:7d:bd:33:fa:76:df:31:34: 05:81:a4:37:4b:22:76:82:0c:ac:bd:28:ac:d7:4d:fc:01:9c: f9:74:7a:b6:64:07:5d:26:4b:6e:d5:d9:88:d7:80:44:67:39: 33:8b:e4:f0:56:7a:98:77:ed:ed:bb:10:38:f6:be:4a:22:08: ed:68:46:12:fc:9a:2b:72:cf:8e:cd:d3:0e:9e:2f:de:05:a5: 4b:ed:f5:c3:00:97:9c:ff:db:80:9b:4f:ac:13:e2:24:30:59: 40:9d:a3:66:69:cd:90:8f:e3:27:33:17:5d:9c:e1:ec:00:39: d5:6f:70:2d:5e:dc:8d:bb:ac:da:34:27:22:f6:53:f4:b4:32: ee:a3:2c:5c:59:83:35:47:3c:04:58:35:e9:d5:c2:1c:f0:43: 8d:1a:12:e7:db:b8:6f:2e:05:c8:40:32:89:07:05:42:54:22: 29:01:4e:67 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaC/wzGz4rWHtDmGqFrakksjMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA1ZTlmY2EwYTg1ODRmZWIxYzEyMzE5MDcxNDIzMDYxYjA4 ZmU0NTYwHhcNMjYwOTIwMTcwMDM1WhcNMjYwOTIxMTcwMDM1WjAzMTEwLwYDVQQD EyhjMTExY2FjZjYyM2E1N2U4YjY2YTIyYzQ5OGNiYWJkYzdhZmRlMzI0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4HKkY1MEChoB6zbeaJLAjui+KhzZ ZTO/HpJYJF2cFJ9MZgdBjW6mZ0GKkiAGCrgvfiLjE2MFxIA4vwfiS7h/65D/B3GR tS8c0k1NOAlLxlnuWKERgTAMnmO9NMSWuRJF9NtBy+upIQ8atugKt9SMYBPAJBv8 ICSE3cGKEht1WlW29jLByZ4ZeZzXJfHVJKK7UPauLHxiCOKjYxCOBA+3Y7ZnNsJd tvp2dSxhLfFr018lGaXVcdb5K6OIQINlRwFUtrlgEsid6g2cP/7SilYKGPlGb/Bs lNYomWLh3/W/pcCakpvdYi7wOsbzXPVqNlYzgML/P5D8xx9Ar8Xw3Od3TwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMERys9iOlfotmoixJjLq9x6/eMkMB8GA1UdIwQY MBaAFAXp/KCoWE/rHBIxkHFCMGGwj+RWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQmVuOG9LaFlULXNjRWpHUWNVSXdZYkNQNUZZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZC9jN2VlOWUtYjViZi00YzJkLWE5ODMt ZGVlM2VkNDk3YWVlLzEvQmVuOG9LaFlULXNjRWpHUWNVSXdZYkNQNUZZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iZC9jN2VlOWUtYjViZi00YzJkLWE5ODMtZGVlM2VkNDk3YWVl LzEvQmVuOG9LaFlULXNjRWpHUWNVSXdZYkNQNUZZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgLDq34Rj nyuwjI+7fr4QD0mPeNDvokly1SMuj+XzI4LG0eB8w3Y1fjuf/pTeWSkSgGDm0lxO BbBVlI4cy4qs2uYx/upW2FV0V48bJjhzEk/0BX29M/p23zE0BYGkN0sidoIMrL0o rNdN/AGc+XR6tmQHXSZLbtXZiNeARGc5M4vk8FZ6mHft7bsQOPa+SiII7WhGEvya K3LPjs3TDp4v3gWlS+31wwCXnP/bgJtPrBPiJDBZQJ2jZmnNkI/jJzMXXZzh7AA5 1W9wLV7cjbus2jQnIvZT9LQy7qMsXFmDNUc8BFg16dXCHPBDjRoS59u4by4FyEAy iQcFQlQiKQFOZw== -----END CERTIFICATE-----Generated at Sun Sep 20 23:50:03 2026 by rpki-client