$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/bd/c7ee9e-b5bf-4c2d-a983-dee3ed497aee/1/Ben8oKhYT-scEjGQcUIwYbCP5FY.mft File: Ben8oKhYT-scEjGQcUIwYbCP5FY.mft (raw, json) Hash identifier: FXInb6FBl/RQMeH0KYHWdoHNvzEKH2kei0g68G9Ef0Y= Subject key identifier: 91:46:5C:A5:5E:D4:2F:25:10:AB:84:64:DF:9F:3B:29:8E:97:E3:74 Authority key identifier: 05:E9:FC:A0:A8:58:4F:EB:1C:12:31:90:71:42:30:61:B0:8F:E4:56 Certificate issuer: /CN=05e9fca0a8584feb1c12319071423061b08fe456 Certificate serial: 01A165D906DA1A2978038ECFEAC747B87A51 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ben8oKhYT-scEjGQcUIwYbCP5FY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/c7ee9e-b5bf-4c2d-a983-dee3ed497aee/1/Ben8oKhYT-scEjGQcUIwYbCP5FY.mft Manifest number: 12CA Signing time: Thu 22 Oct 2026 23:01:24 +0000 Manifest this update: Thu 22 Oct 2026 23:01:24 +0000 Manifest next update: Fri 23 Oct 2026 23:01:24 +0000 Files and hashes: 1: 1-wzLZgHvoTtKlJUwiMWH2FcMG2Q.roa (hash: gecXtL6bXbTjxAwUSJNxs49kgp0JytqkT3osewNP9Tg=) 2: Ben8oKhYT-scEjGQcUIwYbCP5FY.crl (hash: d70d3O1z2DPpVIfTQbUKNBNwL9jPDr/46iwJMDFPmtc=) 3: K0Zub9dKWzCjs4OtkVc_n0LFVVw.roa (hash: WAtq4VjFyxJkBBrD+rRuoVlhMvETsjV5L4Bhvcl0PsU=) 4: L9TWZulmOgbRwrR8pCdihrCbfKY.roa (hash: kpba41p+9FSP2a4Hqmm3zRooFrFU9Uu5ujkaJiigN30=) 5: LyKLy6uT_WPlcRb0ykSf0GYdO4Y.roa (hash: Ws+t3EfpSQ+jlmW0/VstL/1QYYDtPwZDFVE4WDXtUAE=) 6: ML_7NS0uYkmp6GXXamZ3NSPsWOo.roa (hash: hnjHFSEUgTDrMvjlYwRL85H6sKIUA3yDjfvutZSmzgw=) 7: NMzuJZbxOy1LB40urUAindiN9YQ.roa (hash: BSKmMcbD/mOVfjihHJhWhwgJ1b6f29GirmFpN4Kj09M=) 8: YykfUYmRRbTXt94f_g0l_IynvDo.roa (hash: pI8Hi2Q8oLa5BZOGg0QPtqf72tmXIsLTGFmFi6JksGg=) 9: eMcTcCM26_FBi-jWPaQvXdFHm8Y.roa (hash: CN7UhMJ47ktIz/WCrZvYgOygWoLcj7OT337BtvDzxD8=) 10: f0VpgrAXaT3oVxZDOEU2iV1iNSY.roa (hash: iJgG1N6+Tuj84TVnx/5i89nDxTeYyLA4QQjr6o+oq3c=) 11: iYDni8VjNDDolmH_F5AAYHgrmp4.roa (hash: /oy9SLJqYCjuGSfbl4Oo1wvrMBYnNp3f2GJuXLzrOuo=) 12: jkeoRlUiAeo681KZqVdOpuHmKaA.roa (hash: lXnp/mWSzniqxvseJ8C7/Fc99Ljtz0HvIJlr2A2Qz1U=) 13: sZ0JiVG1Az1Dn7s8zECVmXzJnwo.roa (hash: 6tprys5RYcVu5F7SPPiEgBOyn1Agoq+HAa+NVM9JSXc=) 14: y_l5I-08oYpHriEipp4h8dgrSr8.roa (hash: Sudmmxuxp4Gm0euuCyvwJqn5dRNkNZeSNEf/mCRLjYc=) 15: zVSX18y8o4KRMFIOaBGobLqrbvA.roa (hash: zvGv7P9a7DP9g0eTnYWOdSqXm1zetmk1xuEUE1VYzlg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/c7ee9e-b5bf-4c2d-a983-dee3ed497aee/1/Ben8oKhYT-scEjGQcUIwYbCP5FY.crl rsync://rpki.ripe.net/repository/DEFAULT/bd/c7ee9e-b5bf-4c2d-a983-dee3ed497aee/1/Ben8oKhYT-scEjGQcUIwYbCP5FY.mft rsync://rpki.ripe.net/repository/DEFAULT/Ben8oKhYT-scEjGQcUIwYbCP5FY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 23 Oct 2026 19:43:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a1:65:d9:06:da:1a:29:78:03:8e:cf:ea:c7:47:b8:7a:51 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=05e9fca0a8584feb1c12319071423061b08fe456 Validity Not Before: Oct 22 23:01:24 2026 GMT Not After : Oct 23 23:01:24 2026 GMT Subject: CN=91465ca55ed42f2510ab8464df9f3b298e97e374 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:c1:b3:a8:f7:e1:97:da:9f:24:d6:2e:cb:31: 87:06:f7:9a:79:e0:c1:25:28:bf:0b:7a:43:ed:8e: 15:3a:c2:e6:3a:18:27:0c:16:a4:39:f0:0c:ac:7a: ea:74:73:7e:d6:bc:5c:bd:2b:2e:a4:ca:8b:59:b7: 67:0c:ce:1b:57:4b:16:e8:13:76:bc:ba:70:30:51: 88:a8:3f:39:8c:4b:8b:c3:f3:7b:fd:99:3e:ee:ee: 0c:20:d0:b0:69:89:c0:d2:0a:7b:aa:2d:81:18:ef: 93:13:50:e9:d8:b1:a7:7c:1b:41:7b:19:30:f1:c7: 0c:a8:42:f1:61:16:c3:6e:8e:7a:68:c3:ec:22:b8: 07:39:6c:65:c5:e6:37:a3:4a:9e:85:a0:2d:12:1f: cc:2a:4a:38:93:fb:fd:7c:2e:bd:bb:80:9d:e6:4a: dd:8b:33:48:c2:bb:bf:92:9e:13:1f:65:28:ac:53: cc:f0:b6:f1:e3:e6:6d:04:69:9f:ea:0f:dc:7c:65: 86:94:ca:9a:8f:6d:d4:85:41:97:c7:a0:c2:33:c9: c2:2a:ed:49:69:77:b8:29:fb:9a:cc:73:cd:42:f3: e2:ae:48:4f:e5:95:65:7e:56:84:f6:99:03:ab:63: 06:3a:4e:d7:7d:37:16:70:31:a9:b6:35:f4:10:b0: 14:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:46:5C:A5:5E:D4:2F:25:10:AB:84:64:DF:9F:3B:29:8E:97:E3:74 X509v3 Authority Key Identifier: keyid:05:E9:FC:A0:A8:58:4F:EB:1C:12:31:90:71:42:30:61:B0:8F:E4:56 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ben8oKhYT-scEjGQcUIwYbCP5FY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/c7ee9e-b5bf-4c2d-a983-dee3ed497aee/1/Ben8oKhYT-scEjGQcUIwYbCP5FY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/c7ee9e-b5bf-4c2d-a983-dee3ed497aee/1/Ben8oKhYT-scEjGQcUIwYbCP5FY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c0:87:f8:37:b8:4d:20:34:a6:89:c4:b8:06:ea:a9:b2:ba:77: cb:03:d2:30:3f:7f:e2:72:9d:58:4f:f9:a0:a7:1a:3c:52:72: c3:14:ca:5f:72:ad:a2:f8:e5:36:3c:51:6a:8d:ee:f8:fc:f6: 13:1f:b7:13:ed:ef:2e:b5:da:cb:01:a0:ad:3f:32:e2:7a:6c: 0e:9e:73:18:30:cb:06:99:0f:12:9f:6a:07:a9:a0:6b:fd:b9: 21:54:2b:04:bc:93:f9:43:23:e1:ec:92:2f:d3:3e:e1:33:9f: b3:57:32:4a:da:6c:58:c6:1d:1a:86:be:28:19:d2:00:d3:5d: 41:94:8e:11:40:a8:71:45:93:44:b9:c9:77:be:3b:5e:3e:af: f1:ed:e1:03:60:79:42:7b:86:41:03:85:6b:7a:80:c7:4b:06: 15:a9:26:7b:02:6d:c8:8a:ea:12:0b:fb:f2:35:c1:89:62:f9: fb:bc:bb:59:79:fe:a7:fe:d6:44:f9:34:6e:a9:59:8b:65:76: 84:44:ce:c2:ed:07:f2:20:ea:ef:2d:55:f7:18:b2:40:01:1a: aa:a4:69:77:ce:17:bf:d5:25:94:ea:54:53:f0:86:bb:a6:a1: 06:59:5e:a6:82:ef:e1:fb:46:82:bd:28:59:3d:7a:b3:d8:3e: 5c:e7:8c:dd -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaFl2QbaGil4A47P6sdHuHpRMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA1ZTlmY2EwYTg1ODRmZWIxYzEyMzE5MDcxNDIzMDYxYjA4 ZmU0NTYwHhcNMjYxMDIyMjMwMTI0WhcNMjYxMDIzMjMwMTI0WjAzMTEwLwYDVQQD Eyg5MTQ2NWNhNTVlZDQyZjI1MTBhYjg0NjRkZjlmM2IyOThlOTdlMzc0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAycGzqPfhl9qfJNYuyzGHBveaeeDB JSi/C3pD7Y4VOsLmOhgnDBakOfAMrHrqdHN+1rxcvSsupMqLWbdnDM4bV0sW6BN2 vLpwMFGIqD85jEuLw/N7/Zk+7u4MINCwaYnA0gp7qi2BGO+TE1Dp2LGnfBtBexkw 8ccMqELxYRbDbo56aMPsIrgHOWxlxeY3o0qehaAtEh/MKko4k/v9fC69u4Cd5krd izNIwru/kp4TH2UorFPM8Lbx4+ZtBGmf6g/cfGWGlMqaj23UhUGXx6DCM8nCKu1J aXe4KfuazHPNQvPirkhP5ZVlflaE9pkDq2MGOk7XfTcWcDGptjX0ELAUOwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJFGXKVe1C8lEKuEZN+fOymOl+N0MB8GA1UdIwQY MBaAFAXp/KCoWE/rHBIxkHFCMGGwj+RWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQmVuOG9LaFlULXNjRWpHUWNVSXdZYkNQNUZZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZC9jN2VlOWUtYjViZi00YzJkLWE5ODMt ZGVlM2VkNDk3YWVlLzEvQmVuOG9LaFlULXNjRWpHUWNVSXdZYkNQNUZZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iZC9jN2VlOWUtYjViZi00YzJkLWE5ODMtZGVlM2VkNDk3YWVl LzEvQmVuOG9LaFlULXNjRWpHUWNVSXdZYkNQNUZZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAwIf4N7hN IDSmicS4Buqpsrp3ywPSMD9/4nKdWE/5oKcaPFJywxTKX3KtovjlNjxRao3u+Pz2 Ex+3E+3vLrXaywGgrT8y4npsDp5zGDDLBpkPEp9qB6mga/25IVQrBLyT+UMj4eyS L9M+4TOfs1cyStpsWMYdGoa+KBnSANNdQZSOEUCocUWTRLnJd747Xj6v8e3hA2B5 QnuGQQOFa3qAx0sGFakmewJtyIrqEgv78jXBiWL5+7y7WXn+p/7WRPk0bqlZi2V2 hETOwu0H8iDq7y1V9xiyQAEaqqRpd84Xv9UllOpUU/CGu6ahBllepoLv4ftGgr0o WT16s9g+XOeM3Q== -----END CERTIFICATE-----Generated at Fri Oct 23 06:05:26 2026 by rpki-client