$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/bd/c7ee9e-b5bf-4c2d-a983-dee3ed497aee/1/Ben8oKhYT-scEjGQcUIwYbCP5FY.mft File: Ben8oKhYT-scEjGQcUIwYbCP5FY.mft (raw, json) Hash identifier: jh4LZrQvtkyHbaEsbrGfv2f9ZceKnjFqvkcWoCRsjNA= Subject key identifier: 1B:0E:53:6A:9B:15:95:DD:71:B1:6B:EB:92:3E:20:5D:9C:2D:5D:D4 Authority key identifier: 05:E9:FC:A0:A8:58:4F:EB:1C:12:31:90:71:42:30:61:B0:8F:E4:56 Certificate issuer: /CN=05e9fca0a8584feb1c12319071423061b08fe456 Certificate serial: 01A0C58E2B4535F490ECC5E3AFF8CCF4CE98 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ben8oKhYT-scEjGQcUIwYbCP5FY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/c7ee9e-b5bf-4c2d-a983-dee3ed497aee/1/Ben8oKhYT-scEjGQcUIwYbCP5FY.mft Manifest number: 1277 Signing time: Mon 21 Sep 2026 20:00:23 +0000 Manifest this update: Mon 21 Sep 2026 20:00:23 +0000 Manifest next update: Tue 22 Sep 2026 20:00:23 +0000 Files and hashes: 1: 1-wzLZgHvoTtKlJUwiMWH2FcMG2Q.roa (hash: gecXtL6bXbTjxAwUSJNxs49kgp0JytqkT3osewNP9Tg=) 2: Ben8oKhYT-scEjGQcUIwYbCP5FY.crl (hash: LOt/evkbn5Psf0wRqAOmWfV0Usca/QN3MgbS95oLuws=) 3: K0Zub9dKWzCjs4OtkVc_n0LFVVw.roa (hash: WAtq4VjFyxJkBBrD+rRuoVlhMvETsjV5L4Bhvcl0PsU=) 4: L9TWZulmOgbRwrR8pCdihrCbfKY.roa (hash: kpba41p+9FSP2a4Hqmm3zRooFrFU9Uu5ujkaJiigN30=) 5: LyKLy6uT_WPlcRb0ykSf0GYdO4Y.roa (hash: Ws+t3EfpSQ+jlmW0/VstL/1QYYDtPwZDFVE4WDXtUAE=) 6: ML_7NS0uYkmp6GXXamZ3NSPsWOo.roa (hash: hnjHFSEUgTDrMvjlYwRL85H6sKIUA3yDjfvutZSmzgw=) 7: NMzuJZbxOy1LB40urUAindiN9YQ.roa (hash: BSKmMcbD/mOVfjihHJhWhwgJ1b6f29GirmFpN4Kj09M=) 8: YykfUYmRRbTXt94f_g0l_IynvDo.roa (hash: pI8Hi2Q8oLa5BZOGg0QPtqf72tmXIsLTGFmFi6JksGg=) 9: eMcTcCM26_FBi-jWPaQvXdFHm8Y.roa (hash: CN7UhMJ47ktIz/WCrZvYgOygWoLcj7OT337BtvDzxD8=) 10: f0VpgrAXaT3oVxZDOEU2iV1iNSY.roa (hash: iJgG1N6+Tuj84TVnx/5i89nDxTeYyLA4QQjr6o+oq3c=) 11: iYDni8VjNDDolmH_F5AAYHgrmp4.roa (hash: /oy9SLJqYCjuGSfbl4Oo1wvrMBYnNp3f2GJuXLzrOuo=) 12: jkeoRlUiAeo681KZqVdOpuHmKaA.roa (hash: lXnp/mWSzniqxvseJ8C7/Fc99Ljtz0HvIJlr2A2Qz1U=) 13: sZ0JiVG1Az1Dn7s8zECVmXzJnwo.roa (hash: 6tprys5RYcVu5F7SPPiEgBOyn1Agoq+HAa+NVM9JSXc=) 14: y_l5I-08oYpHriEipp4h8dgrSr8.roa (hash: Sudmmxuxp4Gm0euuCyvwJqn5dRNkNZeSNEf/mCRLjYc=) 15: zVSX18y8o4KRMFIOaBGobLqrbvA.roa (hash: zvGv7P9a7DP9g0eTnYWOdSqXm1zetmk1xuEUE1VYzlg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/c7ee9e-b5bf-4c2d-a983-dee3ed497aee/1/Ben8oKhYT-scEjGQcUIwYbCP5FY.crl rsync://rpki.ripe.net/repository/DEFAULT/bd/c7ee9e-b5bf-4c2d-a983-dee3ed497aee/1/Ben8oKhYT-scEjGQcUIwYbCP5FY.mft rsync://rpki.ripe.net/repository/DEFAULT/Ben8oKhYT-scEjGQcUIwYbCP5FY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 22 Sep 2026 19:45:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a0:c5:8e:2b:45:35:f4:90:ec:c5:e3:af:f8:cc:f4:ce:98 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=05e9fca0a8584feb1c12319071423061b08fe456 Validity Not Before: Sep 21 20:00:23 2026 GMT Not After : Sep 22 20:00:23 2026 GMT Subject: CN=1b0e536a9b1595dd71b16beb923e205d9c2d5dd4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:44:76:62:ff:1c:54:77:ff:e6:07:6c:a6:a1: f9:f1:4e:2d:d5:6d:2d:07:f7:dd:a6:89:ff:7f:c2: 3f:fc:81:c8:ee:8e:35:ae:94:71:2a:9a:c7:9f:48: a1:63:94:44:0b:e7:a5:17:c1:9e:85:3e:d6:73:40: ef:6b:89:87:d2:ea:47:97:7c:fe:43:02:dd:5b:33: e5:98:91:61:19:be:00:ff:10:f3:09:d1:7d:c0:ae: 9b:9b:22:2d:5d:e6:7c:ad:a8:f9:74:d1:00:45:c9: 98:47:8d:bc:42:78:94:d3:16:ce:9c:19:40:4f:01: a7:74:ad:a9:8f:19:cf:73:cf:07:4f:76:8c:84:56: 36:45:69:c9:bb:96:c1:66:e8:71:be:f0:6b:50:1a: 72:02:62:6b:17:03:df:55:c1:10:ea:d4:5c:c9:90: 5d:fa:5f:95:e0:49:92:8c:55:58:65:4e:8d:77:f0: 39:be:00:9f:27:f6:d4:74:a0:c3:fb:31:b7:53:da: 52:d8:08:f4:26:04:d1:7e:87:4f:ee:bb:21:19:a2: 97:11:0d:96:f2:51:dd:0c:99:43:0f:42:d1:06:fb: bc:a2:58:20:a5:53:5d:2d:ac:de:d3:a1:77:63:bd: 72:3e:eb:f5:9c:37:4c:99:34:ba:7b:d2:ff:50:f3: 19:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:0E:53:6A:9B:15:95:DD:71:B1:6B:EB:92:3E:20:5D:9C:2D:5D:D4 X509v3 Authority Key Identifier: keyid:05:E9:FC:A0:A8:58:4F:EB:1C:12:31:90:71:42:30:61:B0:8F:E4:56 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ben8oKhYT-scEjGQcUIwYbCP5FY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/c7ee9e-b5bf-4c2d-a983-dee3ed497aee/1/Ben8oKhYT-scEjGQcUIwYbCP5FY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/c7ee9e-b5bf-4c2d-a983-dee3ed497aee/1/Ben8oKhYT-scEjGQcUIwYbCP5FY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 74:fe:7a:66:35:c5:5d:09:77:4c:ab:31:29:9f:ff:0f:cd:b1: bb:df:45:35:cd:a4:7e:75:5e:05:ad:17:6b:c4:c7:26:90:0c: 5f:09:41:fb:88:c8:c5:9d:f7:60:a7:e0:21:47:55:dc:8a:2c: 70:15:ed:17:8d:44:9f:ad:4b:fa:52:5d:2d:2e:f4:4b:68:66: 44:5b:c0:41:a1:24:3d:7b:93:45:86:6a:e5:91:36:76:fc:c2: 43:11:82:96:59:a6:c7:40:a9:b6:0a:42:48:f1:50:83:c5:cb: 4d:58:2e:7c:ad:95:19:b7:ab:7c:f2:6c:92:ae:1a:9b:7e:50: 38:f9:09:49:1e:99:b4:4f:8d:ca:2d:07:bc:97:2b:9d:aa:58: 61:f0:b7:c4:bf:4b:4f:f9:5f:ae:20:d8:97:a3:a0:52:c8:0a: 50:ee:96:4e:0e:93:a6:1f:7f:7d:87:44:8c:60:12:8c:fb:97: 2c:e5:13:3b:b9:d5:e0:48:49:3a:89:68:9d:de:b8:82:7e:3f: 02:1f:1a:75:ba:d1:2f:e4:1b:35:1f:c0:eb:94:5e:3f:df:ac: 10:7c:00:04:3b:60:13:ff:e8:d6:df:3a:a3:3f:60:83:97:6a: ce:61:3b:25:84:99:dc:1c:7f:17:f8:96:46:05:56:9e:72:8c: c6:2b:d7:c5 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaDFjitFNfSQ7MXjr/jM9M6YMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA1ZTlmY2EwYTg1ODRmZWIxYzEyMzE5MDcxNDIzMDYxYjA4 ZmU0NTYwHhcNMjYwOTIxMjAwMDIzWhcNMjYwOTIyMjAwMDIzWjAzMTEwLwYDVQQD EygxYjBlNTM2YTliMTU5NWRkNzFiMTZiZWI5MjNlMjA1ZDljMmQ1ZGQ0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy0R2Yv8cVHf/5gdspqH58U4t1W0t B/fdpon/f8I//IHI7o41rpRxKprHn0ihY5REC+elF8GehT7Wc0Dva4mH0upHl3z+ QwLdWzPlmJFhGb4A/xDzCdF9wK6bmyItXeZ8raj5dNEARcmYR428QniU0xbOnBlA TwGndK2pjxnPc88HT3aMhFY2RWnJu5bBZuhxvvBrUBpyAmJrFwPfVcEQ6tRcyZBd +l+V4EmSjFVYZU6Nd/A5vgCfJ/bUdKDD+zG3U9pS2Aj0JgTRfodP7rshGaKXEQ2W 8lHdDJlDD0LRBvu8olggpVNdLaze06F3Y71yPuv1nDdMmTS6e9L/UPMZEwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBsOU2qbFZXdcbFr65I+IF2cLV3UMB8GA1UdIwQY MBaAFAXp/KCoWE/rHBIxkHFCMGGwj+RWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQmVuOG9LaFlULXNjRWpHUWNVSXdZYkNQNUZZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZC9jN2VlOWUtYjViZi00YzJkLWE5ODMt ZGVlM2VkNDk3YWVlLzEvQmVuOG9LaFlULXNjRWpHUWNVSXdZYkNQNUZZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iZC9jN2VlOWUtYjViZi00YzJkLWE5ODMtZGVlM2VkNDk3YWVl LzEvQmVuOG9LaFlULXNjRWpHUWNVSXdZYkNQNUZZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdP56ZjXF XQl3TKsxKZ//D82xu99FNc2kfnVeBa0Xa8THJpAMXwlB+4jIxZ33YKfgIUdV3Ios cBXtF41En61L+lJdLS70S2hmRFvAQaEkPXuTRYZq5ZE2dvzCQxGCllmmx0CptgpC SPFQg8XLTVgufK2VGberfPJskq4am35QOPkJSR6ZtE+Nyi0HvJcrnapYYfC3xL9L T/lfriDYl6OgUsgKUO6WTg6Tph9/fYdEjGASjPuXLOUTO7nV4EhJOolond64gn4/ Ah8adbrRL+QbNR/A65ReP9+sEHwABDtgE//o1t86oz9gg5dqzmE7JYSZ3Bx/F/iW RgVWnnKMxivXxQ== -----END CERTIFICATE-----Generated at Tue Sep 22 02:49:14 2026 by rpki-client