Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/d8398e-232c-45c2-b8e0-9ce4767da2c1/1/pqBDS-vl36Y92njCSk68HSzXNp0.mft
File: pqBDS-vl36Y92njCSk68HSzXNp0.mft (raw, json)
Hash identifier: EG4s/moGeyK755/jErDpLHy4jL/wEewxd5ub1sY/gKU=
Subject key identifier: 05:82:46:F5:A5:2A:DC:DC:F0:58:E4:94:6D:07:07:09:FD:8C:65:31
Authority key identifier: A6:A0:43:4B:EB:E5:DF:A6:3D:DA:78:C2:4A:4E:BC:1D:2C:D7:36:9D
Certificate issuer: /CN=a6a0434bebe5dfa63dda78c24a4ebc1d2cd7369d
Certificate serial: 019D25BA6AAFBF6ABD9B041AFA8CAD6F2977
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pqBDS-vl36Y92njCSk68HSzXNp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/d8398e-232c-45c2-b8e0-9ce4767da2c1/1/pqBDS-vl36Y92njCSk68HSzXNp0.mft
Manifest number: 188A
Signing time: Wed 25 Mar 2026 16:01:06 +0000
Manifest this update: Wed 25 Mar 2026 16:01:06 +0000
Manifest next update: Thu 26 Mar 2026 16:01:06 +0000
Files and hashes: 1: BeeQIAu6NMmjbyOm_zRckXrCzjQ.roa (hash: Ca+da+tqS9qy4+b+qYuDpbM1Gp5JRavJKwLfRW2e9sg=)
2: LEwM1ia3LB4tjMF-xTBddTZwLEI.roa (hash: Dr/U4Sjro7hTaO7vuNctCUrPg7y8M1sJJNCpEq5nKx8=)
3: NnIeD7Oxn1SYizd0wbtW04eiFek.roa (hash: tNo52za6sFrqb7l6ADAKsf1PPEqsHXF944nHimoWDRw=)
4: pqBDS-vl36Y92njCSk68HSzXNp0.crl (hash: V0ti6/6qsSGZGF5Yn7sVTodP20ekp6bRmaTYGjc/GaM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/d8398e-232c-45c2-b8e0-9ce4767da2c1/1/pqBDS-vl36Y92njCSk68HSzXNp0.crl
rsync://rpki.ripe.net/repository/DEFAULT/f4/d8398e-232c-45c2-b8e0-9ce4767da2c1/1/pqBDS-vl36Y92njCSk68HSzXNp0.mft
rsync://rpki.ripe.net/repository/DEFAULT/pqBDS-vl36Y92njCSk68HSzXNp0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:ba:6a:af:bf:6a:bd:9b:04:1a:fa:8c:ad:6f:29:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a6a0434bebe5dfa63dda78c24a4ebc1d2cd7369d
Validity
Not Before: Mar 25 16:01:06 2026 GMT
Not After : Mar 26 16:01:06 2026 GMT
Subject: CN=058246f5a52adcdcf058e4946d070709fd8c6531
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:1a:c2:ca:d7:3b:0d:e6:68:91:5f:1d:37:4c:
cc:a7:81:a8:43:d1:85:22:16:92:a0:6c:e4:92:3a:
24:c3:ee:d1:d6:c1:ef:1c:20:0c:b8:db:43:78:38:
88:dd:98:e1:51:07:6d:db:86:1e:db:3c:f1:83:5f:
af:f1:0d:5e:8b:f3:c4:0f:d3:34:2e:6b:af:92:3d:
73:67:c3:5e:8b:31:37:31:42:5e:b2:d4:ad:23:a6:
6e:d0:5a:97:85:35:5d:17:88:aa:6f:9f:65:3f:cd:
60:73:58:f6:2e:a8:bf:93:ba:84:aa:81:43:93:f3:
4c:5e:e3:ec:9a:d5:ea:bf:4b:b0:48:ce:f2:2b:50:
b5:72:fe:b6:02:dd:0b:a8:5b:76:60:07:ba:a7:9d:
fb:af:7b:d4:e2:fb:23:c9:76:14:6f:be:e1:e4:18:
b1:5a:80:28:4e:5b:1d:da:f0:1f:26:20:94:5f:7f:
47:87:f0:20:5f:97:2b:76:84:86:02:4b:de:d1:f7:
49:c3:6d:53:01:cc:7c:f1:d1:4c:c1:db:97:2c:3d:
a4:9b:3c:b6:40:1b:c0:94:bf:f4:10:c8:6d:81:02:
24:d4:e8:fd:5f:7d:6e:3a:7e:b0:da:ea:18:0d:95:
e4:27:71:13:94:1b:fb:77:6d:77:dc:78:24:2f:f3:
2c:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:82:46:F5:A5:2A:DC:DC:F0:58:E4:94:6D:07:07:09:FD:8C:65:31
X509v3 Authority Key Identifier:
keyid:A6:A0:43:4B:EB:E5:DF:A6:3D:DA:78:C2:4A:4E:BC:1D:2C:D7:36:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pqBDS-vl36Y92njCSk68HSzXNp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/d8398e-232c-45c2-b8e0-9ce4767da2c1/1/pqBDS-vl36Y92njCSk68HSzXNp0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/d8398e-232c-45c2-b8e0-9ce4767da2c1/1/pqBDS-vl36Y92njCSk68HSzXNp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:7f:60:54:85:0b:c7:e7:4b:4d:36:42:8b:fa:6a:67:ae:67:
d0:70:fe:bd:ae:7b:72:4a:b0:72:b6:b2:ce:c5:f5:e5:30:a3:
f9:1a:ec:ac:b3:11:b6:56:49:8d:d3:bf:dc:77:6e:7f:f0:92:
83:a5:ce:41:ae:ec:ef:dd:d4:23:14:03:d2:09:a5:e2:89:2b:
f1:9a:d7:08:18:e6:e5:7e:7f:58:c4:34:91:bd:1d:76:cb:9c:
46:c6:03:37:1e:58:51:02:c2:a6:5f:b6:ad:18:a1:dc:05:f4:
64:fa:16:89:9f:b8:9a:b6:e8:3e:52:18:d7:98:a1:67:2f:b5:
8d:85:cb:aa:66:4b:61:86:df:88:a3:62:c7:3a:ab:8a:cb:1e:
51:61:45:48:e9:b2:f7:ce:78:9e:bf:43:b5:0e:ac:dc:94:95:
a1:f6:e2:4f:35:16:31:67:ca:d2:98:4d:e9:80:ed:18:0a:84:
aa:a8:f7:f5:21:ee:c4:d2:9b:d7:41:b7:27:f6:86:92:0b:a2:
20:45:a4:c1:69:f1:ab:76:0b:6a:ef:56:c8:6e:ca:08:ec:3f:
6b:03:96:53:56:ca:a8:d9:71:a8:27:cf:0a:5d:79:fe:5f:60:
ea:3d:ab:7d:bd:c9:3b:e8:62:4b:e5:c3:12:2f:f4:6d:1a:73:
66:55:a4:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:24:18 2026 by rpki-client