$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/bd/c7ee9e-b5bf-4c2d-a983-dee3ed497aee/1/Ben8oKhYT-scEjGQcUIwYbCP5FY.mft File: Ben8oKhYT-scEjGQcUIwYbCP5FY.mft (raw, json) Hash identifier: zAVTDv0VMRgafa+zZqy0MhZJbuFSttUprXll80iF59g= Subject key identifier: B5:4A:9F:62:2B:B2:B4:5F:C8:8D:7C:2F:AE:E3:77:76:1E:C8:BC:57 Authority key identifier: 05:E9:FC:A0:A8:58:4F:EB:1C:12:31:90:71:42:30:61:B0:8F:E4:56 Certificate issuer: /CN=05e9fca0a8584feb1c12319071423061b08fe456 Certificate serial: 01A06CB9857B7C5B940534A7FA884B45A86D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ben8oKhYT-scEjGQcUIwYbCP5FY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/c7ee9e-b5bf-4c2d-a983-dee3ed497aee/1/Ben8oKhYT-scEjGQcUIwYbCP5FY.mft Manifest number: 1249 Signing time: Fri 04 Sep 2026 14:01:32 +0000 Manifest this update: Fri 04 Sep 2026 14:01:32 +0000 Manifest next update: Sat 05 Sep 2026 14:01:32 +0000 Files and hashes: 1: 1-wzLZgHvoTtKlJUwiMWH2FcMG2Q.roa (hash: gecXtL6bXbTjxAwUSJNxs49kgp0JytqkT3osewNP9Tg=) 2: Ben8oKhYT-scEjGQcUIwYbCP5FY.crl (hash: 4+F4Of3CaXnch1/ht7bDQVty6lgkZXwwbp1ujmfNS5o=) 3: K0Zub9dKWzCjs4OtkVc_n0LFVVw.roa (hash: WAtq4VjFyxJkBBrD+rRuoVlhMvETsjV5L4Bhvcl0PsU=) 4: L9TWZulmOgbRwrR8pCdihrCbfKY.roa (hash: kpba41p+9FSP2a4Hqmm3zRooFrFU9Uu5ujkaJiigN30=) 5: LyKLy6uT_WPlcRb0ykSf0GYdO4Y.roa (hash: Ws+t3EfpSQ+jlmW0/VstL/1QYYDtPwZDFVE4WDXtUAE=) 6: ML_7NS0uYkmp6GXXamZ3NSPsWOo.roa (hash: hnjHFSEUgTDrMvjlYwRL85H6sKIUA3yDjfvutZSmzgw=) 7: NMzuJZbxOy1LB40urUAindiN9YQ.roa (hash: BSKmMcbD/mOVfjihHJhWhwgJ1b6f29GirmFpN4Kj09M=) 8: YykfUYmRRbTXt94f_g0l_IynvDo.roa (hash: pI8Hi2Q8oLa5BZOGg0QPtqf72tmXIsLTGFmFi6JksGg=) 9: eMcTcCM26_FBi-jWPaQvXdFHm8Y.roa (hash: CN7UhMJ47ktIz/WCrZvYgOygWoLcj7OT337BtvDzxD8=) 10: f0VpgrAXaT3oVxZDOEU2iV1iNSY.roa (hash: iJgG1N6+Tuj84TVnx/5i89nDxTeYyLA4QQjr6o+oq3c=) 11: iYDni8VjNDDolmH_F5AAYHgrmp4.roa (hash: /oy9SLJqYCjuGSfbl4Oo1wvrMBYnNp3f2GJuXLzrOuo=) 12: jkeoRlUiAeo681KZqVdOpuHmKaA.roa (hash: lXnp/mWSzniqxvseJ8C7/Fc99Ljtz0HvIJlr2A2Qz1U=) 13: sZ0JiVG1Az1Dn7s8zECVmXzJnwo.roa (hash: 6tprys5RYcVu5F7SPPiEgBOyn1Agoq+HAa+NVM9JSXc=) 14: y_l5I-08oYpHriEipp4h8dgrSr8.roa (hash: Sudmmxuxp4Gm0euuCyvwJqn5dRNkNZeSNEf/mCRLjYc=) 15: zVSX18y8o4KRMFIOaBGobLqrbvA.roa (hash: zvGv7P9a7DP9g0eTnYWOdSqXm1zetmk1xuEUE1VYzlg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/c7ee9e-b5bf-4c2d-a983-dee3ed497aee/1/Ben8oKhYT-scEjGQcUIwYbCP5FY.crl rsync://rpki.ripe.net/repository/DEFAULT/bd/c7ee9e-b5bf-4c2d-a983-dee3ed497aee/1/Ben8oKhYT-scEjGQcUIwYbCP5FY.mft rsync://rpki.ripe.net/repository/DEFAULT/Ben8oKhYT-scEjGQcUIwYbCP5FY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 05 Sep 2026 14:01:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a0:6c:b9:85:7b:7c:5b:94:05:34:a7:fa:88:4b:45:a8:6d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=05e9fca0a8584feb1c12319071423061b08fe456 Validity Not Before: Sep 4 14:01:32 2026 GMT Not After : Sep 5 14:01:32 2026 GMT Subject: CN=b54a9f622bb2b45fc88d7c2faee377761ec8bc57 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:32:ad:2d:68:ae:7b:c9:fb:16:13:12:aa:b3: 12:e9:12:fb:a0:35:0f:0c:2d:5e:9a:c8:cf:59:2c: a1:77:9d:7e:f2:6f:86:b7:ab:b4:37:46:f6:73:a4: 9a:85:69:c7:f2:c1:fa:97:8a:11:95:0b:89:40:dd: 66:ba:56:5a:8b:cf:c2:44:08:aa:37:bd:51:36:71: 66:71:f8:43:38:93:9e:9c:43:13:fb:d5:02:67:61: 85:14:07:e2:72:5d:a6:6e:7f:65:01:1e:5c:d6:81: e4:2a:55:17:07:b2:4f:18:ca:4c:e6:fa:7c:20:3a: 26:77:94:63:69:31:b2:75:a2:6b:84:1b:5e:47:43: 7e:f1:f9:1e:9e:44:cb:40:a8:d8:80:2d:db:d7:23: d4:a0:5e:49:10:68:f4:19:ff:50:e7:dc:e3:65:e9: 86:2d:98:3f:6e:a3:c1:19:6b:84:a8:0b:5a:48:8f: d0:e3:89:c6:b3:54:f4:09:f2:8a:b5:80:41:10:e1: de:1c:be:8f:50:c7:68:52:83:34:d9:02:09:c5:9b: 86:a0:d7:81:06:5e:b8:e9:c1:2c:11:61:68:ea:c2: dc:cc:2b:83:30:3c:1b:0b:dd:c3:a9:39:19:54:dd: ea:c5:ef:13:2c:53:66:e7:9b:25:5f:4c:a1:46:ad: b1:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:4A:9F:62:2B:B2:B4:5F:C8:8D:7C:2F:AE:E3:77:76:1E:C8:BC:57 X509v3 Authority Key Identifier: keyid:05:E9:FC:A0:A8:58:4F:EB:1C:12:31:90:71:42:30:61:B0:8F:E4:56 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ben8oKhYT-scEjGQcUIwYbCP5FY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/c7ee9e-b5bf-4c2d-a983-dee3ed497aee/1/Ben8oKhYT-scEjGQcUIwYbCP5FY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/c7ee9e-b5bf-4c2d-a983-dee3ed497aee/1/Ben8oKhYT-scEjGQcUIwYbCP5FY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption cc:f4:d5:de:6b:c4:73:b0:79:25:6d:59:a3:7b:91:36:72:79: e3:85:ea:44:b5:d7:75:9d:82:a2:6f:86:3c:b1:ad:f8:81:46: c9:9a:90:cb:5a:15:9b:8e:42:6d:cc:b8:db:7f:4c:28:45:fe: 79:0d:3d:20:f1:16:4c:86:2f:87:7e:c4:b6:fa:54:27:b3:5e: 16:f4:48:ca:c2:1c:87:85:d4:3c:ea:9e:e9:ca:68:24:e6:bc: b9:c2:5d:43:36:d1:f4:d4:8a:ec:ac:4b:36:78:48:5b:9e:34: 25:3f:7c:1d:d2:ad:f8:c9:58:f0:4d:1c:cf:5c:e3:3a:a2:8f: 0e:4a:84:11:8e:7e:60:eb:cf:1d:81:59:a0:b6:37:bf:e2:86: 04:d9:8e:94:6e:c7:bd:9f:02:b0:8f:10:b6:39:98:04:36:7c: 86:37:7a:45:03:8e:81:3e:dd:ff:76:8c:ec:42:05:90:f6:91: 6d:e8:fe:44:18:b7:c2:82:47:14:d3:e0:a0:ce:f9:cc:b3:df: 40:ad:e4:01:7b:6c:8b:2f:34:7f:77:1e:06:45:d1:47:b0:62: 2b:e5:51:40:47:c2:06:e5:1a:30:94:3f:87:e5:cb:5d:a0:c7: 21:98:03:a3:2c:d1:28:41:4c:a6:ce:95:40:a5:f6:85:b9:54: 5f:95:be:89 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaBsuYV7fFuUBTSn+ohLRahtMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA1ZTlmY2EwYTg1ODRmZWIxYzEyMzE5MDcxNDIzMDYxYjA4 ZmU0NTYwHhcNMjYwOTA0MTQwMTMyWhcNMjYwOTA1MTQwMTMyWjAzMTEwLwYDVQQD EyhiNTRhOWY2MjJiYjJiNDVmYzg4ZDdjMmZhZWUzNzc3NjFlYzhiYzU3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnjKtLWiue8n7FhMSqrMS6RL7oDUP DC1emsjPWSyhd51+8m+Gt6u0N0b2c6SahWnH8sH6l4oRlQuJQN1mulZai8/CRAiq N71RNnFmcfhDOJOenEMT+9UCZ2GFFAficl2mbn9lAR5c1oHkKlUXB7JPGMpM5vp8 IDomd5RjaTGydaJrhBteR0N+8fkenkTLQKjYgC3b1yPUoF5JEGj0Gf9Q59zjZemG LZg/bqPBGWuEqAtaSI/Q44nGs1T0CfKKtYBBEOHeHL6PUMdoUoM02QIJxZuGoNeB Bl646cEsEWFo6sLczCuDMDwbC93DqTkZVN3qxe8TLFNm55slX0yhRq2xEwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLVKn2IrsrRfyI18L67jd3YeyLxXMB8GA1UdIwQY MBaAFAXp/KCoWE/rHBIxkHFCMGGwj+RWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQmVuOG9LaFlULXNjRWpHUWNVSXdZYkNQNUZZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZC9jN2VlOWUtYjViZi00YzJkLWE5ODMt ZGVlM2VkNDk3YWVlLzEvQmVuOG9LaFlULXNjRWpHUWNVSXdZYkNQNUZZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iZC9jN2VlOWUtYjViZi00YzJkLWE5ODMtZGVlM2VkNDk3YWVl LzEvQmVuOG9LaFlULXNjRWpHUWNVSXdZYkNQNUZZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAzPTV3mvE c7B5JW1Zo3uRNnJ544XqRLXXdZ2Com+GPLGt+IFGyZqQy1oVm45Cbcy4239MKEX+ eQ09IPEWTIYvh37EtvpUJ7NeFvRIysIch4XUPOqe6cpoJOa8ucJdQzbR9NSK7KxL NnhIW540JT98HdKt+MlY8E0cz1zjOqKPDkqEEY5+YOvPHYFZoLY3v+KGBNmOlG7H vZ8CsI8QtjmYBDZ8hjd6RQOOgT7d/3aM7EIFkPaRbej+RBi3woJHFNPgoM75zLPf QK3kAXtsiy80f3ceBkXRR7BiK+VRQEfCBuUaMJQ/h+XLXaDHIZgDoyzRKEFMps6V QKX2hblUX5W+iQ== -----END CERTIFICATE-----Generated at Sat Sep 5 00:59:54 2026 by rpki-client