Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f4/d8398e-232c-45c2-b8e0-9ce4767da2c1/1/pqBDS-vl36Y92njCSk68HSzXNp0.mft
File: pqBDS-vl36Y92njCSk68HSzXNp0.mft (raw, json)
Hash identifier: NUmJlQzLfPWEXCE584MuRey6qc2C6PADLxg97WhhB6s=
Subject key identifier: 2B:34:20:2C:3D:A1:D4:BD:2C:DF:C9:26:42:CF:D9:4E:94:66:61:8C
Authority key identifier: A6:A0:43:4B:EB:E5:DF:A6:3D:DA:78:C2:4A:4E:BC:1D:2C:D7:36:9D
Certificate issuer: /CN=a6a0434bebe5dfa63dda78c24a4ebc1d2cd7369d
Certificate serial: 01A0DBDFA206D2663DD24E0B7FEBC389EBDC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pqBDS-vl36Y92njCSk68HSzXNp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/d8398e-232c-45c2-b8e0-9ce4767da2c1/1/pqBDS-vl36Y92njCSk68HSzXNp0.mft
Manifest number: 1A76
Signing time: Sat 26 Sep 2026 04:01:01 +0000
Manifest this update: Sat 26 Sep 2026 04:01:01 +0000
Manifest next update: Sun 27 Sep 2026 04:01:01 +0000
Files and hashes: 1: BeeQIAu6NMmjbyOm_zRckXrCzjQ.roa (hash: Ca+da+tqS9qy4+b+qYuDpbM1Gp5JRavJKwLfRW2e9sg=)
2: LEwM1ia3LB4tjMF-xTBddTZwLEI.roa (hash: Dr/U4Sjro7hTaO7vuNctCUrPg7y8M1sJJNCpEq5nKx8=)
3: NnIeD7Oxn1SYizd0wbtW04eiFek.roa (hash: tNo52za6sFrqb7l6ADAKsf1PPEqsHXF944nHimoWDRw=)
4: pqBDS-vl36Y92njCSk68HSzXNp0.crl (hash: kK4badAWddD5wnNKvseYYgHySaKLSGAf5O/qlJQuos8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/d8398e-232c-45c2-b8e0-9ce4767da2c1/1/pqBDS-vl36Y92njCSk68HSzXNp0.crl
rsync://rpki.ripe.net/repository/DEFAULT/f4/d8398e-232c-45c2-b8e0-9ce4767da2c1/1/pqBDS-vl36Y92njCSk68HSzXNp0.mft
rsync://rpki.ripe.net/repository/DEFAULT/pqBDS-vl36Y92njCSk68HSzXNp0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 02:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:db:df:a2:06:d2:66:3d:d2:4e:0b:7f:eb:c3:89:eb:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a6a0434bebe5dfa63dda78c24a4ebc1d2cd7369d
Validity
Not Before: Sep 26 04:01:01 2026 GMT
Not After : Sep 27 04:01:01 2026 GMT
Subject: CN=2b34202c3da1d4bd2cdfc92642cfd94e9466618c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:c0:e1:5b:58:cb:7c:93:6a:85:17:70:64:7f:
9e:fa:98:10:e3:1e:1b:af:e8:e0:96:4e:eb:e5:ba:
33:16:92:f9:f2:a1:2e:2c:07:e6:cf:29:47:5b:1e:
6c:c6:c8:85:cf:80:c2:82:fc:0c:3d:84:25:dc:05:
46:e3:47:f3:09:d8:d7:3e:d4:f7:9f:f2:97:36:08:
53:b8:da:41:ef:bc:b9:67:eb:a9:6c:0f:0a:cb:18:
9b:75:7f:57:96:06:b0:1b:2b:16:bf:73:72:ff:1b:
69:f8:82:bf:9c:4a:a3:c2:4b:cc:1f:7e:e4:e5:a0:
ce:89:13:c6:a6:21:7b:82:07:15:fe:8d:11:16:06:
80:9f:c2:33:a8:cd:60:41:ce:39:47:32:21:0a:47:
ca:37:fe:f0:ea:cc:ef:6d:ed:90:37:b7:26:8b:c5:
36:55:14:70:d5:45:55:12:55:cf:f1:1d:44:b4:29:
e3:af:96:ff:0f:c7:c5:dd:d8:64:52:18:2a:bb:29:
14:a6:b9:5c:15:fe:96:ee:07:75:b9:77:98:d5:ec:
24:2e:52:98:fc:2f:b9:19:db:c4:ab:35:c2:33:9c:
c1:71:0e:d7:0d:fd:7b:19:e3:f0:73:ce:37:f1:f7:
f7:83:ed:0f:cd:a6:10:6e:2b:65:cc:d6:7d:b4:1a:
b9:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:34:20:2C:3D:A1:D4:BD:2C:DF:C9:26:42:CF:D9:4E:94:66:61:8C
X509v3 Authority Key Identifier:
keyid:A6:A0:43:4B:EB:E5:DF:A6:3D:DA:78:C2:4A:4E:BC:1D:2C:D7:36:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pqBDS-vl36Y92njCSk68HSzXNp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/d8398e-232c-45c2-b8e0-9ce4767da2c1/1/pqBDS-vl36Y92njCSk68HSzXNp0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/d8398e-232c-45c2-b8e0-9ce4767da2c1/1/pqBDS-vl36Y92njCSk68HSzXNp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a2:b7:68:0d:e7:cf:7e:a5:c6:d2:35:b5:52:f4:cf:98:b5:86:
77:3d:6f:ea:70:49:b7:59:f4:69:44:03:d6:dd:22:09:45:d9:
aa:e4:8f:db:38:e5:be:79:c4:07:a7:0b:e1:ef:e5:b3:83:1d:
e8:62:c7:a3:24:e7:c5:c2:af:2b:64:d4:64:b7:3c:87:82:22:
ee:1e:17:9c:41:6c:1e:40:c5:11:f6:38:24:d4:6f:2b:30:82:
97:b7:91:ef:96:62:78:3c:9f:12:26:1c:bc:75:27:88:bb:fe:
a7:68:31:1e:e8:b6:71:29:df:97:f1:c8:58:56:82:e7:57:ea:
c9:1c:7f:6a:75:dd:be:50:15:46:14:ec:ab:a7:98:f6:c6:d0:
33:8f:0b:a5:6b:f8:9c:f4:5c:d5:fc:c0:0f:e5:e3:1d:63:3b:
a2:c3:56:c7:ba:91:37:c5:4d:f6:ef:b8:c5:d7:23:4d:9f:60:
7e:bd:cf:fd:3b:19:6f:32:74:56:72:8a:93:ce:66:e5:63:3b:
3e:81:df:39:6a:ee:70:5b:c0:93:90:5e:d9:5d:c3:5c:d4:1e:
7d:b0:ef:18:e1:0f:e6:d0:0e:c2:84:4e:35:ff:55:d7:bc:96:
aa:ab:58:dc:7a:6a:38:ba:ae:2d:6e:62:90:8d:2c:cb:74:f6:
19:6e:22:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 13:49:39 2026 by rpki-client