$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/c7ee9e-b5bf-4c2d-a983-dee3ed497aee/1/Ben8oKhYT-scEjGQcUIwYbCP5FY.mft File: Ben8oKhYT-scEjGQcUIwYbCP5FY.mft (raw, json) Hash identifier: q5eiyC6s69fkud8AexswcSdTpDNowRze6XSLkrk56j4= Subject key identifier: D1:39:F8:E8:2E:B2:EF:EE:C9:65:DA:9F:7D:EA:C8:A0:B2:F4:95:D2 Authority key identifier: 05:E9:FC:A0:A8:58:4F:EB:1C:12:31:90:71:42:30:61:B0:8F:E4:56 Certificate issuer: /CN=05e9fca0a8584feb1c12319071423061b08fe456 Certificate serial: 019E1D901E90AA8916AA8FF2413F0170F32D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ben8oKhYT-scEjGQcUIwYbCP5FY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/c7ee9e-b5bf-4c2d-a983-dee3ed497aee/1/Ben8oKhYT-scEjGQcUIwYbCP5FY.mft Manifest number: 1116 Signing time: Tue 12 May 2026 19:00:44 +0000 Manifest this update: Tue 12 May 2026 19:00:44 +0000 Manifest next update: Wed 13 May 2026 19:00:44 +0000 Files and hashes: 1: 1-wzLZgHvoTtKlJUwiMWH2FcMG2Q.roa (hash: gecXtL6bXbTjxAwUSJNxs49kgp0JytqkT3osewNP9Tg=) 2: Ben8oKhYT-scEjGQcUIwYbCP5FY.crl (hash: YNRgkZMR+u7rLCAQxyToK3NqL/re97ot22p60wadvQQ=) 3: IgX0yg7OLyE1FEmaOzvAFNwec_c.roa (hash: sizb6eBcughEhem8l1JDf+pWnplrlybiAHwSKXoLMaY=) 4: K0Zub9dKWzCjs4OtkVc_n0LFVVw.roa (hash: WAtq4VjFyxJkBBrD+rRuoVlhMvETsjV5L4Bhvcl0PsU=) 5: L9TWZulmOgbRwrR8pCdihrCbfKY.roa (hash: kpba41p+9FSP2a4Hqmm3zRooFrFU9Uu5ujkaJiigN30=) 6: LyKLy6uT_WPlcRb0ykSf0GYdO4Y.roa (hash: Ws+t3EfpSQ+jlmW0/VstL/1QYYDtPwZDFVE4WDXtUAE=) 7: ML_7NS0uYkmp6GXXamZ3NSPsWOo.roa (hash: hnjHFSEUgTDrMvjlYwRL85H6sKIUA3yDjfvutZSmzgw=) 8: NMzuJZbxOy1LB40urUAindiN9YQ.roa (hash: BSKmMcbD/mOVfjihHJhWhwgJ1b6f29GirmFpN4Kj09M=) 9: YykfUYmRRbTXt94f_g0l_IynvDo.roa (hash: pI8Hi2Q8oLa5BZOGg0QPtqf72tmXIsLTGFmFi6JksGg=) 10: cyPQOcdzS_4SfdQdVz0CqSZMdww.roa (hash: 0WNUn7RLirYyARkbquAfInmWqcScy7Jj0jC1hD9xaio=) 11: f0VpgrAXaT3oVxZDOEU2iV1iNSY.roa (hash: iJgG1N6+Tuj84TVnx/5i89nDxTeYyLA4QQjr6o+oq3c=) 12: iYDni8VjNDDolmH_F5AAYHgrmp4.roa (hash: /oy9SLJqYCjuGSfbl4Oo1wvrMBYnNp3f2GJuXLzrOuo=) 13: jkeoRlUiAeo681KZqVdOpuHmKaA.roa (hash: lXnp/mWSzniqxvseJ8C7/Fc99Ljtz0HvIJlr2A2Qz1U=) 14: sZ0JiVG1Az1Dn7s8zECVmXzJnwo.roa (hash: 6tprys5RYcVu5F7SPPiEgBOyn1Agoq+HAa+NVM9JSXc=) 15: y_l5I-08oYpHriEipp4h8dgrSr8.roa (hash: Sudmmxuxp4Gm0euuCyvwJqn5dRNkNZeSNEf/mCRLjYc=) 16: zVSX18y8o4KRMFIOaBGobLqrbvA.roa (hash: zvGv7P9a7DP9g0eTnYWOdSqXm1zetmk1xuEUE1VYzlg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/c7ee9e-b5bf-4c2d-a983-dee3ed497aee/1/Ben8oKhYT-scEjGQcUIwYbCP5FY.crl rsync://rpki.ripe.net/repository/DEFAULT/bd/c7ee9e-b5bf-4c2d-a983-dee3ed497aee/1/Ben8oKhYT-scEjGQcUIwYbCP5FY.mft rsync://rpki.ripe.net/repository/DEFAULT/Ben8oKhYT-scEjGQcUIwYbCP5FY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 13 May 2026 19:00:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9e:1d:90:1e:90:aa:89:16:aa:8f:f2:41:3f:01:70:f3:2d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=05e9fca0a8584feb1c12319071423061b08fe456 Validity Not Before: May 12 19:00:44 2026 GMT Not After : May 13 19:00:44 2026 GMT Subject: CN=d139f8e82eb2efeec965da9f7deac8a0b2f495d2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:1f:1b:70:52:bc:8d:29:5a:43:05:e3:0a:99: 91:01:55:80:cd:9f:a9:4c:31:58:25:ff:a9:41:00: f3:ec:09:30:6e:00:e3:c0:ec:36:b1:a3:e3:f2:47: f2:a4:89:78:c0:86:8e:b0:ec:95:0f:d7:15:28:03: b5:2a:f8:ea:65:cd:5d:00:c8:47:6d:61:71:35:25: 20:3a:99:73:f3:86:4d:e0:f4:99:25:20:95:b3:e5: a1:aa:1d:7e:c1:64:d0:05:a9:58:63:98:1a:8f:3d: 79:a8:5b:9c:be:c2:3c:1c:9b:9c:31:ca:64:ad:90: 21:0b:69:38:15:28:fc:74:e2:cb:c9:22:7a:78:cf: 87:7c:ee:6c:da:dc:57:08:34:67:e6:71:85:5c:89: 72:a1:f0:ba:c0:90:1d:8d:6e:22:4f:34:b9:1d:29: bb:0d:45:7b:8d:70:b1:24:3e:87:69:12:2c:15:f1: 6d:8c:c4:6a:95:16:5a:0f:8a:75:0c:29:38:40:d9: 34:6a:7d:00:98:e0:2e:66:1f:e5:a4:18:6a:77:77: 45:2a:e1:b7:65:09:17:ab:c5:61:85:25:ab:9b:cc: 04:44:c1:61:78:50:44:1a:22:34:81:ae:fb:b3:f1: 14:cf:42:99:fd:99:12:7c:d8:ef:2c:50:ac:d4:a2: a8:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:39:F8:E8:2E:B2:EF:EE:C9:65:DA:9F:7D:EA:C8:A0:B2:F4:95:D2 X509v3 Authority Key Identifier: keyid:05:E9:FC:A0:A8:58:4F:EB:1C:12:31:90:71:42:30:61:B0:8F:E4:56 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ben8oKhYT-scEjGQcUIwYbCP5FY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/c7ee9e-b5bf-4c2d-a983-dee3ed497aee/1/Ben8oKhYT-scEjGQcUIwYbCP5FY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/c7ee9e-b5bf-4c2d-a983-dee3ed497aee/1/Ben8oKhYT-scEjGQcUIwYbCP5FY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 23:49:de:45:4b:bc:ba:40:d5:6a:37:88:9d:c2:8b:b4:ae:3c: ca:5f:82:d9:27:bc:fa:f0:aa:66:c1:4f:69:15:d9:13:6f:98: f6:44:7e:f8:67:67:57:df:62:c1:e6:8b:8d:6b:42:00:54:d7: 2f:ca:2b:a5:bb:77:61:65:ea:5d:3c:12:f8:f1:08:08:f5:ec: 3f:87:cf:e7:a6:f8:78:13:c5:dc:ec:30:63:60:bf:86:23:bd: d7:4c:1d:f7:04:28:64:27:10:fb:ac:78:62:5b:e0:17:05:78: 57:04:b7:bf:52:13:8d:2c:56:f7:6b:b9:29:2f:dd:43:57:d7: d3:4f:67:6e:ac:b3:59:09:75:4e:67:ee:6e:47:a4:ed:87:1a: 47:51:22:93:68:ef:38:b4:14:4c:44:58:48:94:5c:19:33:3f: f5:0c:7d:92:e5:47:ce:f0:52:35:77:58:5f:ce:fd:65:40:f6: 8f:d3:bb:8d:96:79:45:d6:05:06:b6:6f:d5:18:70:34:ab:15: eb:8b:b7:5c:4c:f5:9f:e8:e2:28:09:7a:d7:01:bf:58:c2:24: 69:8a:8e:65:b7:81:99:8c:8f:5e:e7:d7:fb:f2:1c:ce:4c:13: 8b:5f:51:a5:ff:1f:99:ff:42:6d:49:a4:f5:d3:75:4e:5d:8d: c8:b1:a9:a7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ4dkB6QqokWqo/yQT8BcPMtMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA1ZTlmY2EwYTg1ODRmZWIxYzEyMzE5MDcxNDIzMDYxYjA4 ZmU0NTYwHhcNMjYwNTEyMTkwMDQ0WhcNMjYwNTEzMTkwMDQ0WjAzMTEwLwYDVQQD EyhkMTM5ZjhlODJlYjJlZmVlYzk2NWRhOWY3ZGVhYzhhMGIyZjQ5NWQyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0R8bcFK8jSlaQwXjCpmRAVWAzZ+p TDFYJf+pQQDz7AkwbgDjwOw2saPj8kfypIl4wIaOsOyVD9cVKAO1KvjqZc1dAMhH bWFxNSUgOplz84ZN4PSZJSCVs+Whqh1+wWTQBalYY5gajz15qFucvsI8HJucMcpk rZAhC2k4FSj8dOLLySJ6eM+HfO5s2txXCDRn5nGFXIlyofC6wJAdjW4iTzS5HSm7 DUV7jXCxJD6HaRIsFfFtjMRqlRZaD4p1DCk4QNk0an0AmOAuZh/lpBhqd3dFKuG3 ZQkXq8VhhSWrm8wERMFheFBEGiI0ga77s/EUz0KZ/ZkSfNjvLFCs1KKolwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNE5+Ogusu/uyWXan33qyKCy9JXSMB8GA1UdIwQY MBaAFAXp/KCoWE/rHBIxkHFCMGGwj+RWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQmVuOG9LaFlULXNjRWpHUWNVSXdZYkNQNUZZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZC9jN2VlOWUtYjViZi00YzJkLWE5ODMt ZGVlM2VkNDk3YWVlLzEvQmVuOG9LaFlULXNjRWpHUWNVSXdZYkNQNUZZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iZC9jN2VlOWUtYjViZi00YzJkLWE5ODMtZGVlM2VkNDk3YWVl LzEvQmVuOG9LaFlULXNjRWpHUWNVSXdZYkNQNUZZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAI0neRUu8 ukDVajeIncKLtK48yl+C2Se8+vCqZsFPaRXZE2+Y9kR++GdnV99iweaLjWtCAFTX L8orpbt3YWXqXTwS+PEICPXsP4fP56b4eBPF3OwwY2C/hiO910wd9wQoZCcQ+6x4 YlvgFwV4VwS3v1ITjSxW92u5KS/dQ1fX009nbqyzWQl1Tmfubkek7YcaR1Eik2jv OLQUTERYSJRcGTM/9Qx9kuVHzvBSNXdYX879ZUD2j9O7jZZ5RdYFBrZv1RhwNKsV 64u3XEz1n+jiKAl61wG/WMIkaYqOZbeBmYyPXufX+/IczkwTi19Rpf8fmf9CbUmk 9dN1Tl2NyLGppw== -----END CERTIFICATE-----Generated at Wed May 13 03:40:54 2026 by rpki-client