$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/bd/c7ee9e-b5bf-4c2d-a983-dee3ed497aee/1/Ben8oKhYT-scEjGQcUIwYbCP5FY.mft File: Ben8oKhYT-scEjGQcUIwYbCP5FY.mft (raw, json) Hash identifier: 2THir2d1bcWSDcE4CZQbU+wJ2VArF46HQDoPrRO3wz4= Subject key identifier: 95:DE:16:96:BC:E2:E7:91:98:8C:26:02:C7:EE:DA:09:16:57:78:6F Authority key identifier: 05:E9:FC:A0:A8:58:4F:EB:1C:12:31:90:71:42:30:61:B0:8F:E4:56 Certificate issuer: /CN=05e9fca0a8584feb1c12319071423061b08fe456 Certificate serial: 01A0CB594546E5368C702628E298019B86CA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ben8oKhYT-scEjGQcUIwYbCP5FY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/c7ee9e-b5bf-4c2d-a983-dee3ed497aee/1/Ben8oKhYT-scEjGQcUIwYbCP5FY.mft Manifest number: 127A Signing time: Tue 22 Sep 2026 23:00:20 +0000 Manifest this update: Tue 22 Sep 2026 23:00:20 +0000 Manifest next update: Wed 23 Sep 2026 23:00:20 +0000 Files and hashes: 1: 1-wzLZgHvoTtKlJUwiMWH2FcMG2Q.roa (hash: gecXtL6bXbTjxAwUSJNxs49kgp0JytqkT3osewNP9Tg=) 2: Ben8oKhYT-scEjGQcUIwYbCP5FY.crl (hash: kFk21hFI1TRLtdtCN9NYw75RUTLTx9TInpX2n+WyjKU=) 3: K0Zub9dKWzCjs4OtkVc_n0LFVVw.roa (hash: WAtq4VjFyxJkBBrD+rRuoVlhMvETsjV5L4Bhvcl0PsU=) 4: L9TWZulmOgbRwrR8pCdihrCbfKY.roa (hash: kpba41p+9FSP2a4Hqmm3zRooFrFU9Uu5ujkaJiigN30=) 5: LyKLy6uT_WPlcRb0ykSf0GYdO4Y.roa (hash: Ws+t3EfpSQ+jlmW0/VstL/1QYYDtPwZDFVE4WDXtUAE=) 6: ML_7NS0uYkmp6GXXamZ3NSPsWOo.roa (hash: hnjHFSEUgTDrMvjlYwRL85H6sKIUA3yDjfvutZSmzgw=) 7: NMzuJZbxOy1LB40urUAindiN9YQ.roa (hash: BSKmMcbD/mOVfjihHJhWhwgJ1b6f29GirmFpN4Kj09M=) 8: YykfUYmRRbTXt94f_g0l_IynvDo.roa (hash: pI8Hi2Q8oLa5BZOGg0QPtqf72tmXIsLTGFmFi6JksGg=) 9: eMcTcCM26_FBi-jWPaQvXdFHm8Y.roa (hash: CN7UhMJ47ktIz/WCrZvYgOygWoLcj7OT337BtvDzxD8=) 10: f0VpgrAXaT3oVxZDOEU2iV1iNSY.roa (hash: iJgG1N6+Tuj84TVnx/5i89nDxTeYyLA4QQjr6o+oq3c=) 11: iYDni8VjNDDolmH_F5AAYHgrmp4.roa (hash: /oy9SLJqYCjuGSfbl4Oo1wvrMBYnNp3f2GJuXLzrOuo=) 12: jkeoRlUiAeo681KZqVdOpuHmKaA.roa (hash: lXnp/mWSzniqxvseJ8C7/Fc99Ljtz0HvIJlr2A2Qz1U=) 13: sZ0JiVG1Az1Dn7s8zECVmXzJnwo.roa (hash: 6tprys5RYcVu5F7SPPiEgBOyn1Agoq+HAa+NVM9JSXc=) 14: y_l5I-08oYpHriEipp4h8dgrSr8.roa (hash: Sudmmxuxp4Gm0euuCyvwJqn5dRNkNZeSNEf/mCRLjYc=) 15: zVSX18y8o4KRMFIOaBGobLqrbvA.roa (hash: zvGv7P9a7DP9g0eTnYWOdSqXm1zetmk1xuEUE1VYzlg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/c7ee9e-b5bf-4c2d-a983-dee3ed497aee/1/Ben8oKhYT-scEjGQcUIwYbCP5FY.crl rsync://rpki.ripe.net/repository/DEFAULT/bd/c7ee9e-b5bf-4c2d-a983-dee3ed497aee/1/Ben8oKhYT-scEjGQcUIwYbCP5FY.mft rsync://rpki.ripe.net/repository/DEFAULT/Ben8oKhYT-scEjGQcUIwYbCP5FY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 23 Sep 2026 23:00:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a0:cb:59:45:46:e5:36:8c:70:26:28:e2:98:01:9b:86:ca Signature Algorithm: sha256WithRSAEncryption Issuer: CN=05e9fca0a8584feb1c12319071423061b08fe456 Validity Not Before: Sep 22 23:00:20 2026 GMT Not After : Sep 23 23:00:20 2026 GMT Subject: CN=95de1696bce2e791988c2602c7eeda091657786f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:fa:f7:d1:be:f6:af:99:ce:d6:1b:25:26:9a: a3:fd:7d:01:18:01:8c:de:0a:04:2f:f5:32:f4:5d: 83:a9:d1:76:9c:ab:d0:d6:07:07:0d:86:f4:ce:dc: dd:16:48:b1:0e:56:69:a0:14:cc:b8:14:d5:b0:b0: a1:99:ff:3f:a9:d9:41:0d:8f:98:be:b0:3b:72:c7: 36:c2:13:0b:26:cd:1c:49:67:15:e8:e5:a1:87:34: 40:47:82:f3:c2:16:87:35:10:e6:6a:7a:e0:67:41: 7e:8b:43:d0:02:13:19:69:77:a1:8f:13:48:b6:de: 0b:82:33:6d:23:aa:ef:5a:23:a5:bf:1d:ab:f2:0e: 28:ea:ae:13:99:b9:ab:6a:3a:f7:4c:7c:be:71:72: a3:a4:6b:9f:be:d5:b4:42:90:92:0d:22:e6:1e:ba: 25:73:a5:54:80:c8:7e:df:2f:50:3d:f4:c3:2e:f8: f1:50:50:3d:b3:92:f9:bd:3f:c1:bb:ce:ee:5b:37: 2e:28:c7:e2:31:fc:24:f1:5d:c5:66:5e:27:06:2d: 7b:4e:51:c3:ef:66:ed:cf:7e:46:43:25:32:8d:d2: 9d:14:3d:df:60:fc:3a:1d:64:b9:6c:93:28:13:e2: 82:44:13:8c:32:03:89:3d:33:45:4e:69:24:e0:e5: bb:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:DE:16:96:BC:E2:E7:91:98:8C:26:02:C7:EE:DA:09:16:57:78:6F X509v3 Authority Key Identifier: keyid:05:E9:FC:A0:A8:58:4F:EB:1C:12:31:90:71:42:30:61:B0:8F:E4:56 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ben8oKhYT-scEjGQcUIwYbCP5FY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/c7ee9e-b5bf-4c2d-a983-dee3ed497aee/1/Ben8oKhYT-scEjGQcUIwYbCP5FY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/c7ee9e-b5bf-4c2d-a983-dee3ed497aee/1/Ben8oKhYT-scEjGQcUIwYbCP5FY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6a:0f:be:18:50:a4:38:d7:70:ac:80:93:a9:54:d0:56:4c:d9: 0f:b7:44:a6:53:9e:55:f6:1d:b5:12:39:65:43:fc:90:e6:e7: a6:8c:70:6c:98:65:02:a5:14:a2:b1:0d:92:d0:ea:52:1e:e7: 6f:70:86:5a:2c:ba:94:40:f9:8f:1c:a5:e9:a3:70:dc:71:d1: b8:8f:3d:30:7c:c7:ca:ee:98:41:49:d4:fc:e7:b6:89:3b:ba: 54:e8:15:a9:45:19:a2:10:e4:aa:9d:4e:c9:f6:99:73:22:83: ec:ff:1b:0c:d8:6e:16:70:fe:e6:27:3f:98:df:b9:94:ef:ec: f8:88:b2:78:e5:3c:fb:8f:30:d3:2a:18:01:0c:6a:b2:58:81: 8e:dc:e0:b2:26:29:e0:b6:a3:5f:be:4d:f0:5c:b6:6d:5b:1d: b7:8e:49:37:da:fa:19:b7:11:c6:03:b8:fb:02:a4:c7:92:78: e1:2b:f9:7e:9b:d4:63:f5:57:ab:d2:15:3b:20:a4:1f:df:27: 0f:62:d1:09:f8:ec:70:50:06:62:1f:bf:dc:03:71:1c:00:a7: e0:62:00:cf:a0:6d:7c:68:58:dc:62:71:af:0c:68:d7:8f:76: 3e:3e:95:68:a1:82:0c:ac:84:43:f5:ce:0c:1e:e7:1e:07:82: 47:42:e4:8a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaDLWUVG5TaMcCYo4pgBm4bKMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA1ZTlmY2EwYTg1ODRmZWIxYzEyMzE5MDcxNDIzMDYxYjA4 ZmU0NTYwHhcNMjYwOTIyMjMwMDIwWhcNMjYwOTIzMjMwMDIwWjAzMTEwLwYDVQQD Eyg5NWRlMTY5NmJjZTJlNzkxOTg4YzI2MDJjN2VlZGEwOTE2NTc3ODZmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjvr30b72r5nO1hslJpqj/X0BGAGM 3goEL/Uy9F2DqdF2nKvQ1gcHDYb0ztzdFkixDlZpoBTMuBTVsLChmf8/qdlBDY+Y vrA7csc2whMLJs0cSWcV6OWhhzRAR4LzwhaHNRDmanrgZ0F+i0PQAhMZaXehjxNI tt4LgjNtI6rvWiOlvx2r8g4o6q4Tmbmrajr3THy+cXKjpGufvtW0QpCSDSLmHrol c6VUgMh+3y9QPfTDLvjxUFA9s5L5vT/Bu87uWzcuKMfiMfwk8V3FZl4nBi17TlHD 72btz35GQyUyjdKdFD3fYPw6HWS5bJMoE+KCRBOMMgOJPTNFTmkk4OW7VwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJXeFpa84ueRmIwmAsfu2gkWV3hvMB8GA1UdIwQY MBaAFAXp/KCoWE/rHBIxkHFCMGGwj+RWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQmVuOG9LaFlULXNjRWpHUWNVSXdZYkNQNUZZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZC9jN2VlOWUtYjViZi00YzJkLWE5ODMt ZGVlM2VkNDk3YWVlLzEvQmVuOG9LaFlULXNjRWpHUWNVSXdZYkNQNUZZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iZC9jN2VlOWUtYjViZi00YzJkLWE5ODMtZGVlM2VkNDk3YWVl LzEvQmVuOG9LaFlULXNjRWpHUWNVSXdZYkNQNUZZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAag++GFCk ONdwrICTqVTQVkzZD7dEplOeVfYdtRI5ZUP8kObnpoxwbJhlAqUUorENktDqUh7n b3CGWiy6lED5jxyl6aNw3HHRuI89MHzHyu6YQUnU/Oe2iTu6VOgVqUUZohDkqp1O yfaZcyKD7P8bDNhuFnD+5ic/mN+5lO/s+IiyeOU8+48w0yoYAQxqsliBjtzgsiYp 4LajX75N8Fy2bVsdt45JN9r6GbcRxgO4+wKkx5J44Sv5fpvUY/VXq9IVOyCkH98n D2LRCfjscFAGYh+/3ANxHACn4GIAz6BtfGhY3GJxrwxo1492Pj6VaKGCDKyEQ/XO DB7nHgeCR0Lkig== -----END CERTIFICATE-----Generated at Wed Sep 23 10:40:31 2026 by rpki-client