$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/c7ee9e-b5bf-4c2d-a983-dee3ed497aee/1/Ben8oKhYT-scEjGQcUIwYbCP5FY.mft File: Ben8oKhYT-scEjGQcUIwYbCP5FY.mft (raw, json) Hash identifier: iLorzl4lFUHFVJbm9dfM2+KTmKUTXpyKEy8Qw7Ak/k0= Subject key identifier: CD:60:E9:64:68:67:FB:3A:02:81:FA:0D:C0:1B:09:2F:18:72:98:6A Authority key identifier: 05:E9:FC:A0:A8:58:4F:EB:1C:12:31:90:71:42:30:61:B0:8F:E4:56 Certificate issuer: /CN=05e9fca0a8584feb1c12319071423061b08fe456 Certificate serial: 019CCB9B116AE9336F258E0258CFC18FC5F5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ben8oKhYT-scEjGQcUIwYbCP5FY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/c7ee9e-b5bf-4c2d-a983-dee3ed497aee/1/Ben8oKhYT-scEjGQcUIwYbCP5FY.mft Manifest number: 1067 Signing time: Sun 08 Mar 2026 04:01:03 +0000 Manifest this update: Sun 08 Mar 2026 04:01:03 +0000 Manifest next update: Mon 09 Mar 2026 04:01:03 +0000 Files and hashes: 1: 1-wzLZgHvoTtKlJUwiMWH2FcMG2Q.roa (hash: gecXtL6bXbTjxAwUSJNxs49kgp0JytqkT3osewNP9Tg=) 2: Ben8oKhYT-scEjGQcUIwYbCP5FY.crl (hash: DD7sxdArjEVD82JiEr79HzLeFqMwM22Avsl4Kw0HDVk=) 3: IgX0yg7OLyE1FEmaOzvAFNwec_c.roa (hash: sizb6eBcughEhem8l1JDf+pWnplrlybiAHwSKXoLMaY=) 4: K0Zub9dKWzCjs4OtkVc_n0LFVVw.roa (hash: WAtq4VjFyxJkBBrD+rRuoVlhMvETsjV5L4Bhvcl0PsU=) 5: L9TWZulmOgbRwrR8pCdihrCbfKY.roa (hash: kpba41p+9FSP2a4Hqmm3zRooFrFU9Uu5ujkaJiigN30=) 6: LyKLy6uT_WPlcRb0ykSf0GYdO4Y.roa (hash: Ws+t3EfpSQ+jlmW0/VstL/1QYYDtPwZDFVE4WDXtUAE=) 7: ML_7NS0uYkmp6GXXamZ3NSPsWOo.roa (hash: hnjHFSEUgTDrMvjlYwRL85H6sKIUA3yDjfvutZSmzgw=) 8: NMzuJZbxOy1LB40urUAindiN9YQ.roa (hash: BSKmMcbD/mOVfjihHJhWhwgJ1b6f29GirmFpN4Kj09M=) 9: YykfUYmRRbTXt94f_g0l_IynvDo.roa (hash: pI8Hi2Q8oLa5BZOGg0QPtqf72tmXIsLTGFmFi6JksGg=) 10: cyPQOcdzS_4SfdQdVz0CqSZMdww.roa (hash: 0WNUn7RLirYyARkbquAfInmWqcScy7Jj0jC1hD9xaio=) 11: f0VpgrAXaT3oVxZDOEU2iV1iNSY.roa (hash: iJgG1N6+Tuj84TVnx/5i89nDxTeYyLA4QQjr6o+oq3c=) 12: iYDni8VjNDDolmH_F5AAYHgrmp4.roa (hash: /oy9SLJqYCjuGSfbl4Oo1wvrMBYnNp3f2GJuXLzrOuo=) 13: jkeoRlUiAeo681KZqVdOpuHmKaA.roa (hash: lXnp/mWSzniqxvseJ8C7/Fc99Ljtz0HvIJlr2A2Qz1U=) 14: sZ0JiVG1Az1Dn7s8zECVmXzJnwo.roa (hash: 6tprys5RYcVu5F7SPPiEgBOyn1Agoq+HAa+NVM9JSXc=) 15: y_l5I-08oYpHriEipp4h8dgrSr8.roa (hash: Sudmmxuxp4Gm0euuCyvwJqn5dRNkNZeSNEf/mCRLjYc=) 16: zVSX18y8o4KRMFIOaBGobLqrbvA.roa (hash: zvGv7P9a7DP9g0eTnYWOdSqXm1zetmk1xuEUE1VYzlg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/c7ee9e-b5bf-4c2d-a983-dee3ed497aee/1/Ben8oKhYT-scEjGQcUIwYbCP5FY.crl rsync://rpki.ripe.net/repository/DEFAULT/bd/c7ee9e-b5bf-4c2d-a983-dee3ed497aee/1/Ben8oKhYT-scEjGQcUIwYbCP5FY.mft rsync://rpki.ripe.net/repository/DEFAULT/Ben8oKhYT-scEjGQcUIwYbCP5FY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 08 Mar 2026 20:09:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:cb:9b:11:6a:e9:33:6f:25:8e:02:58:cf:c1:8f:c5:f5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=05e9fca0a8584feb1c12319071423061b08fe456 Validity Not Before: Mar 8 04:01:03 2026 GMT Not After : Mar 9 04:01:03 2026 GMT Subject: CN=cd60e9646867fb3a0281fa0dc01b092f1872986a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:bd:84:bb:a3:13:e7:9b:c2:08:b2:a9:79:52: ea:dc:4a:22:66:83:ad:d0:69:35:ec:31:25:12:dc: f8:81:8d:aa:57:70:6e:56:e9:a4:5c:99:ee:bd:2c: 18:41:89:1e:14:aa:a9:b9:fb:4b:0a:b7:b6:f0:97: 14:c3:90:11:56:c0:2d:b6:c2:ee:32:b8:fd:dd:32: 95:07:92:46:f0:10:98:14:f2:1a:9b:4d:3e:46:53: 59:b7:0e:f0:66:6e:c2:a7:ea:99:a2:c9:d8:a3:3d: d1:cb:24:95:10:91:54:10:1b:c4:62:66:42:f5:3f: 60:c6:9f:5d:f8:6a:bf:f5:c9:a9:59:78:0f:ff:1f: a9:5e:e2:12:cd:ae:5a:9b:e3:6f:c8:6e:ed:83:96: fa:53:47:72:4b:76:ce:3b:ff:38:4d:1c:99:e7:fb: f6:9f:11:7f:ad:45:42:c5:d0:53:f9:1b:2c:a2:f4: c8:d2:13:25:e2:c6:61:05:66:b5:69:e0:b6:ab:8a: 9e:59:67:9f:67:c4:4f:60:51:35:ac:e4:8c:aa:6f: 5d:f0:8a:83:28:47:4e:4e:79:36:0c:6d:78:46:5b: 4d:d9:59:57:7f:1b:8c:7a:87:16:61:86:98:8a:92: 0f:ba:ab:9b:c3:61:26:7a:c0:02:40:9e:9a:75:e7: 00:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:60:E9:64:68:67:FB:3A:02:81:FA:0D:C0:1B:09:2F:18:72:98:6A X509v3 Authority Key Identifier: keyid:05:E9:FC:A0:A8:58:4F:EB:1C:12:31:90:71:42:30:61:B0:8F:E4:56 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ben8oKhYT-scEjGQcUIwYbCP5FY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/c7ee9e-b5bf-4c2d-a983-dee3ed497aee/1/Ben8oKhYT-scEjGQcUIwYbCP5FY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/c7ee9e-b5bf-4c2d-a983-dee3ed497aee/1/Ben8oKhYT-scEjGQcUIwYbCP5FY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b3:57:94:37:ef:7b:88:fa:2f:16:6f:25:70:b3:4d:84:d9:a5: 84:a5:ff:6a:c6:82:aa:13:18:54:78:89:62:6d:41:77:9c:d1: 89:15:58:8e:02:38:28:bf:63:c9:09:08:af:ae:eb:da:f5:b7: 9d:f2:7a:c3:19:41:d9:1b:29:24:eb:8f:6b:c9:90:6f:8f:34: 01:87:76:80:f8:ca:60:eb:77:30:14:f0:27:80:01:b7:12:cc: f0:00:7c:22:db:ed:9a:7c:ff:79:32:24:bb:0e:e3:d3:a0:c8: 38:e4:df:6c:d1:3d:33:7f:8e:7d:71:2a:0d:c1:5a:05:f8:ca: 78:b4:1b:80:76:09:eb:0d:0c:14:df:a7:49:eb:05:a4:42:a8: a4:a7:6a:d6:0d:3d:9c:d2:f3:1a:28:58:62:9c:d0:c3:16:5a: 91:41:46:28:ab:20:64:76:aa:ef:60:a6:47:9a:60:03:d4:91: d3:06:70:29:cf:c1:3f:2b:c1:5d:59:3b:4d:41:e8:7e:51:40: 40:87:d9:ae:6d:28:0f:d2:c2:58:cc:6d:14:b3:81:ce:fa:77: 21:9b:28:e5:29:f7:82:40:a1:0b:f5:2c:7e:11:cf:9b:af:cb: ba:31:11:ca:6c:ce:aa:fb:4f:ca:b3:64:6e:1f:df:4b:5c:e9: 50:60:e9:b2 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZzLmxFq6TNvJY4CWM/Bj8X1MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA1ZTlmY2EwYTg1ODRmZWIxYzEyMzE5MDcxNDIzMDYxYjA4 ZmU0NTYwHhcNMjYwMzA4MDQwMTAzWhcNMjYwMzA5MDQwMTAzWjAzMTEwLwYDVQQD EyhjZDYwZTk2NDY4NjdmYjNhMDI4MWZhMGRjMDFiMDkyZjE4NzI5ODZhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkL2Eu6MT55vCCLKpeVLq3EoiZoOt 0Gk17DElEtz4gY2qV3BuVumkXJnuvSwYQYkeFKqpuftLCre28JcUw5ARVsAttsLu Mrj93TKVB5JG8BCYFPIam00+RlNZtw7wZm7Cp+qZosnYoz3RyySVEJFUEBvEYmZC 9T9gxp9d+Gq/9cmpWXgP/x+pXuISza5am+NvyG7tg5b6U0dyS3bOO/84TRyZ5/v2 nxF/rUVCxdBT+RssovTI0hMl4sZhBWa1aeC2q4qeWWefZ8RPYFE1rOSMqm9d8IqD KEdOTnk2DG14RltN2VlXfxuMeocWYYaYipIPuqubw2EmesACQJ6adecALQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFM1g6WRoZ/s6AoH6DcAbCS8YcphqMB8GA1UdIwQY MBaAFAXp/KCoWE/rHBIxkHFCMGGwj+RWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQmVuOG9LaFlULXNjRWpHUWNVSXdZYkNQNUZZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZC9jN2VlOWUtYjViZi00YzJkLWE5ODMt ZGVlM2VkNDk3YWVlLzEvQmVuOG9LaFlULXNjRWpHUWNVSXdZYkNQNUZZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iZC9jN2VlOWUtYjViZi00YzJkLWE5ODMtZGVlM2VkNDk3YWVl LzEvQmVuOG9LaFlULXNjRWpHUWNVSXdZYkNQNUZZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAs1eUN+97 iPovFm8lcLNNhNmlhKX/asaCqhMYVHiJYm1Bd5zRiRVYjgI4KL9jyQkIr67r2vW3 nfJ6wxlB2RspJOuPa8mQb480AYd2gPjKYOt3MBTwJ4ABtxLM8AB8Itvtmnz/eTIk uw7j06DIOOTfbNE9M3+OfXEqDcFaBfjKeLQbgHYJ6w0MFN+nSesFpEKopKdq1g09 nNLzGihYYpzQwxZakUFGKKsgZHaq72CmR5pgA9SR0wZwKc/BPyvBXVk7TUHoflFA QIfZrm0oD9LCWMxtFLOBzvp3IZso5Sn3gkChC/UsfhHPm6/LujERymzOqvtPyrNk bh/fS1zpUGDpsg== -----END CERTIFICATE-----Generated at Sun Mar 8 07:20:37 2026 by rpki-client