Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/d8398e-232c-45c2-b8e0-9ce4767da2c1/1/pqBDS-vl36Y92njCSk68HSzXNp0.mft
File: pqBDS-vl36Y92njCSk68HSzXNp0.mft (raw, json)
Hash identifier: INh1Urp/43L6Sx9LvdZrCzPGyRZkoU2wxxt7i50eIRI=
Subject key identifier: 74:9A:70:C4:35:D9:91:41:B5:E0:96:A6:D6:99:0B:7E:22:2C:85:5F
Authority key identifier: A6:A0:43:4B:EB:E5:DF:A6:3D:DA:78:C2:4A:4E:BC:1D:2C:D7:36:9D
Certificate issuer: /CN=a6a0434bebe5dfa63dda78c24a4ebc1d2cd7369d
Certificate serial: 019E1ED9D3F274E1C0666516A37C2131AEDB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pqBDS-vl36Y92njCSk68HSzXNp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/d8398e-232c-45c2-b8e0-9ce4767da2c1/1/pqBDS-vl36Y92njCSk68HSzXNp0.mft
Manifest number: 190B
Signing time: Wed 13 May 2026 01:00:52 +0000
Manifest this update: Wed 13 May 2026 01:00:52 +0000
Manifest next update: Thu 14 May 2026 01:00:52 +0000
Files and hashes: 1: BeeQIAu6NMmjbyOm_zRckXrCzjQ.roa (hash: Ca+da+tqS9qy4+b+qYuDpbM1Gp5JRavJKwLfRW2e9sg=)
2: LEwM1ia3LB4tjMF-xTBddTZwLEI.roa (hash: Dr/U4Sjro7hTaO7vuNctCUrPg7y8M1sJJNCpEq5nKx8=)
3: NnIeD7Oxn1SYizd0wbtW04eiFek.roa (hash: tNo52za6sFrqb7l6ADAKsf1PPEqsHXF944nHimoWDRw=)
4: pqBDS-vl36Y92njCSk68HSzXNp0.crl (hash: eK3f/F+R05hQQAztejLf0yFOcZu55acNMqqaSxfa0g4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/d8398e-232c-45c2-b8e0-9ce4767da2c1/1/pqBDS-vl36Y92njCSk68HSzXNp0.crl
rsync://rpki.ripe.net/repository/DEFAULT/f4/d8398e-232c-45c2-b8e0-9ce4767da2c1/1/pqBDS-vl36Y92njCSk68HSzXNp0.mft
rsync://rpki.ripe.net/repository/DEFAULT/pqBDS-vl36Y92njCSk68HSzXNp0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 May 2026 01:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1e:d9:d3:f2:74:e1:c0:66:65:16:a3:7c:21:31:ae:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a6a0434bebe5dfa63dda78c24a4ebc1d2cd7369d
Validity
Not Before: May 13 01:00:52 2026 GMT
Not After : May 14 01:00:52 2026 GMT
Subject: CN=749a70c435d99141b5e096a6d6990b7e222c855f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:36:b9:c8:2a:27:0b:d5:3f:e5:a8:1d:0c:7b:
95:4b:12:98:4d:6e:e1:fc:22:65:cb:a4:0b:c1:5c:
d0:67:21:e8:73:37:5b:27:7f:f7:38:05:35:9e:d5:
16:37:6c:8b:1b:7f:19:e2:e9:76:30:4e:1d:e7:b4:
08:cf:1d:11:07:7b:f9:ad:14:b0:28:cf:0c:f7:23:
14:20:1a:02:90:34:6b:de:a7:ad:a9:3b:d9:76:56:
56:52:03:c8:ee:5d:3d:39:0b:7b:30:6c:83:66:c3:
b3:bd:0f:02:7b:10:c1:2d:11:e7:90:2b:b5:b9:65:
c4:c0:87:b5:1f:ad:c3:5c:8b:c1:0d:58:ba:f7:cf:
fe:71:c0:b1:46:24:20:32:c6:6a:cb:63:d2:2e:66:
ca:62:df:94:22:db:58:cd:cd:de:85:16:6d:35:2e:
bf:32:6e:96:ec:12:ca:f2:7e:da:c1:8d:4e:c5:ec:
fc:c7:97:07:5d:09:95:0f:bb:a1:a5:ff:42:04:3a:
24:bd:e8:19:c0:b6:44:03:18:c6:92:29:a6:a9:c0:
50:71:fa:14:ff:72:f1:17:4e:eb:c3:05:3c:ed:b5:
9a:76:32:03:4b:fb:b4:8d:6f:8d:8c:98:52:78:f4:
0f:b9:d2:5a:79:e5:fd:21:b4:46:e7:eb:0c:ac:98:
6c:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:9A:70:C4:35:D9:91:41:B5:E0:96:A6:D6:99:0B:7E:22:2C:85:5F
X509v3 Authority Key Identifier:
keyid:A6:A0:43:4B:EB:E5:DF:A6:3D:DA:78:C2:4A:4E:BC:1D:2C:D7:36:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pqBDS-vl36Y92njCSk68HSzXNp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/d8398e-232c-45c2-b8e0-9ce4767da2c1/1/pqBDS-vl36Y92njCSk68HSzXNp0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/d8398e-232c-45c2-b8e0-9ce4767da2c1/1/pqBDS-vl36Y92njCSk68HSzXNp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
16:0f:22:0b:22:a6:64:0d:77:4b:dd:f7:78:6a:b6:58:34:67:
43:03:ae:75:c9:b6:02:85:14:99:57:a2:0a:17:6c:a8:3c:99:
eb:23:c9:39:c6:68:0a:a5:52:b2:71:cb:51:03:c3:3a:4b:d3:
db:5e:47:d0:1b:99:a5:f6:11:e7:6f:a5:58:89:86:94:c9:2d:
9f:23:ff:19:85:a3:ce:1e:90:20:03:14:96:a5:9b:f0:70:7e:
1f:e8:b8:6d:a1:cf:d8:06:4b:8d:95:25:49:c6:95:e9:ea:a0:
17:6a:09:c6:8a:a9:f3:fd:ed:e7:e6:08:87:b2:cf:69:78:99:
f5:4e:38:f4:cd:41:64:38:f8:06:6f:75:ed:36:7b:26:36:79:
9c:5d:d1:a2:63:1c:2a:a5:41:56:26:f8:1f:b4:ed:09:49:a3:
e8:12:a7:e4:48:d5:10:5a:0d:57:ad:9c:58:d1:51:c8:3b:18:
40:b7:fc:8f:2f:43:69:27:07:d7:80:8b:f2:cc:2d:8e:4b:af:
d5:ec:30:15:d2:b6:dd:3d:12:7e:39:9b:26:5f:dc:f3:06:16:
40:f8:54:e1:f7:0a:8d:b5:73:58:25:ac:04:92:db:87:c0:65:
f4:b1:f3:42:a5:26:b9:7b:f4:3f:31:f3:c5:72:7e:9c:7d:07:
46:22:25:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 12:59:48 2026 by rpki-client