Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f4/d8398e-232c-45c2-b8e0-9ce4767da2c1/1/pqBDS-vl36Y92njCSk68HSzXNp0.mft
File: pqBDS-vl36Y92njCSk68HSzXNp0.mft (raw, json)
Hash identifier: tGX/6k2vmySRhgX4OHifmAVY5vMvIYdrmPU3GZYnSs8=
Subject key identifier: 07:FB:F4:88:34:20:87:AC:8E:7D:3D:EB:DD:F0:A9:47:99:E2:B2:2F
Authority key identifier: A6:A0:43:4B:EB:E5:DF:A6:3D:DA:78:C2:4A:4E:BC:1D:2C:D7:36:9D
Certificate issuer: /CN=a6a0434bebe5dfa63dda78c24a4ebc1d2cd7369d
Certificate serial: 01A185D1AB14EDF8B4B6BEC6A47AB226FB70
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pqBDS-vl36Y92njCSk68HSzXNp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/d8398e-232c-45c2-b8e0-9ce4767da2c1/1/pqBDS-vl36Y92njCSk68HSzXNp0.mft
Manifest number: 1ACE
Signing time: Thu 29 Oct 2026 04:01:12 +0000
Manifest this update: Thu 29 Oct 2026 04:01:12 +0000
Manifest next update: Fri 30 Oct 2026 04:01:12 +0000
Files and hashes: 1: BeeQIAu6NMmjbyOm_zRckXrCzjQ.roa (hash: Ca+da+tqS9qy4+b+qYuDpbM1Gp5JRavJKwLfRW2e9sg=)
2: LEwM1ia3LB4tjMF-xTBddTZwLEI.roa (hash: Dr/U4Sjro7hTaO7vuNctCUrPg7y8M1sJJNCpEq5nKx8=)
3: NnIeD7Oxn1SYizd0wbtW04eiFek.roa (hash: tNo52za6sFrqb7l6ADAKsf1PPEqsHXF944nHimoWDRw=)
4: pqBDS-vl36Y92njCSk68HSzXNp0.crl (hash: dL+ocflVeZFMu317FD769o8iIFQseXVj9lsLObUQJTI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/d8398e-232c-45c2-b8e0-9ce4767da2c1/1/pqBDS-vl36Y92njCSk68HSzXNp0.crl
rsync://rpki.ripe.net/repository/DEFAULT/f4/d8398e-232c-45c2-b8e0-9ce4767da2c1/1/pqBDS-vl36Y92njCSk68HSzXNp0.mft
rsync://rpki.ripe.net/repository/DEFAULT/pqBDS-vl36Y92njCSk68HSzXNp0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 29 Oct 2026 23:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:85:d1:ab:14:ed:f8:b4:b6:be:c6:a4:7a:b2:26:fb:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a6a0434bebe5dfa63dda78c24a4ebc1d2cd7369d
Validity
Not Before: Oct 29 04:01:12 2026 GMT
Not After : Oct 30 04:01:12 2026 GMT
Subject: CN=07fbf488342087ac8e7d3debddf0a94799e2b22f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:d5:20:a1:6f:41:72:2d:2f:6e:4a:97:c2:6e:
a5:5e:19:c1:0e:fa:06:f3:e5:44:4d:07:cb:f9:59:
4f:1e:4a:8d:48:87:48:05:49:21:30:ca:b5:14:7a:
c1:ba:5b:39:45:fd:78:fd:a0:ac:ba:a5:0a:be:80:
09:12:96:e7:63:af:03:5a:f4:ca:fa:a9:a3:a9:d8:
c3:a7:92:37:02:94:bf:9b:c2:9b:48:80:5d:2b:e2:
c2:78:e6:7a:a5:b4:b8:f9:a7:4b:1c:94:38:d3:5e:
3f:ac:e8:a8:3c:05:74:0a:02:9c:c8:c3:ad:1a:81:
53:ef:44:4e:b6:1f:6f:e7:40:a8:d6:fb:35:c1:e1:
0c:af:47:22:6f:16:87:79:9b:82:cc:13:17:34:bd:
bb:93:5e:a1:13:d6:2e:1e:25:71:61:b1:a1:66:49:
03:a4:51:7b:b0:39:c0:01:07:c1:03:83:0a:5c:0b:
56:67:43:c4:7f:15:e5:b9:0b:e8:dc:18:6a:5e:e6:
4e:95:25:55:aa:87:f2:69:9c:4b:b6:9c:28:e9:76:
c7:c1:f9:bf:0e:3a:09:9a:58:03:7c:cb:db:2d:db:
19:4a:98:a9:61:55:46:78:ce:e4:80:c4:5f:fd:8a:
f0:88:b3:6a:b9:cf:c7:20:ab:51:c7:26:37:95:9a:
84:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:FB:F4:88:34:20:87:AC:8E:7D:3D:EB:DD:F0:A9:47:99:E2:B2:2F
X509v3 Authority Key Identifier:
keyid:A6:A0:43:4B:EB:E5:DF:A6:3D:DA:78:C2:4A:4E:BC:1D:2C:D7:36:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pqBDS-vl36Y92njCSk68HSzXNp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/d8398e-232c-45c2-b8e0-9ce4767da2c1/1/pqBDS-vl36Y92njCSk68HSzXNp0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/d8398e-232c-45c2-b8e0-9ce4767da2c1/1/pqBDS-vl36Y92njCSk68HSzXNp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:e9:51:64:a1:f8:4f:f3:41:3e:b0:b2:bd:4b:a0:c5:af:20:
16:10:28:8a:07:9b:cb:98:bd:24:ce:bd:9e:c8:47:3a:0b:77:
22:a5:a3:55:36:15:f0:f7:f2:75:0b:7b:af:4f:53:4f:89:11:
9c:4a:4c:98:a6:13:c4:d6:6b:48:7e:99:4b:0c:b2:f7:40:02:
0a:7f:89:92:0f:3f:cc:f4:cb:26:8a:a4:9e:ba:4e:72:44:93:
52:62:db:2a:ee:45:23:2e:33:08:78:3b:3a:38:b3:e2:a0:e3:
93:6e:85:1c:4d:cb:0a:c7:23:e2:98:6c:37:84:ce:f0:78:a6:
8a:5b:15:4a:c6:20:a5:fa:d2:fc:16:0a:41:54:5d:86:ea:10:
94:87:58:ae:7e:dc:5c:1b:20:25:a7:ae:6a:e6:fe:cc:f5:95:
93:e5:d5:fa:f9:8d:be:c0:cb:c1:37:9c:46:a8:e5:62:79:ce:
68:1d:8a:06:19:d1:3d:32:d4:e2:8f:c9:5e:9c:05:aa:fb:06:
52:23:eb:1a:cf:60:4b:b2:5b:42:23:7f:4c:1a:c1:2a:14:a1:
f2:ec:52:7b:b5:70:83:4b:92:b3:2a:42:02:c5:85:bf:05:a1:
a3:f9:e1:9f:69:9b:0b:c1:62:bd:55:36:0c:ec:6b:ea:81:10:
bb:c3:2a:1f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaGF0asU7fi0tr7GpHqyJvtwMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE2YTA0MzRiZWJlNWRmYTYzZGRhNzhjMjRhNGViYzFkMmNk
NzM2OWQwHhcNMjYxMDI5MDQwMTEyWhcNMjYxMDMwMDQwMTEyWjAzMTEwLwYDVQQD
EygwN2ZiZjQ4ODM0MjA4N2FjOGU3ZDNkZWJkZGYwYTk0Nzk5ZTJiMjJmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAldUgoW9Bci0vbkqXwm6lXhnBDvoG
8+VETQfL+VlPHkqNSIdIBUkhMMq1FHrBuls5Rf14/aCsuqUKvoAJEpbnY68DWvTK
+qmjqdjDp5I3ApS/m8KbSIBdK+LCeOZ6pbS4+adLHJQ4014/rOioPAV0CgKcyMOt
GoFT70ROth9v50Co1vs1weEMr0cibxaHeZuCzBMXNL27k16hE9YuHiVxYbGhZkkD
pFF7sDnAAQfBA4MKXAtWZ0PEfxXluQvo3BhqXuZOlSVVqofyaZxLtpwo6XbHwfm/
DjoJmlgDfMvbLdsZSpipYVVGeM7kgMRf/YrwiLNquc/HIKtRxyY3lZqEhQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAf79Ig0IIesjn09693wqUeZ4rIvMB8GA1UdIwQY
MBaAFKagQ0vr5d+mPdp4wkpOvB0s1zadMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcHFCRFMtdmwzNlk5Mm5qQ1NrNjhIU3pYTnAwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNC9kODM5OGUtMjMyYy00NWMyLWI4ZTAt
OWNlNDc2N2RhMmMxLzEvcHFCRFMtdmwzNlk5Mm5qQ1NrNjhIU3pYTnAwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNC9kODM5OGUtMjMyYy00NWMyLWI4ZTAtOWNlNDc2N2RhMmMx
LzEvcHFCRFMtdmwzNlk5Mm5qQ1NrNjhIU3pYTnAwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdOlRZKH4
T/NBPrCyvUugxa8gFhAoigeby5i9JM69nshHOgt3IqWjVTYV8PfydQt7r09TT4kR
nEpMmKYTxNZrSH6ZSwyy90ACCn+Jkg8/zPTLJoqknrpOckSTUmLbKu5FIy4zCHg7
Ojiz4qDjk26FHE3LCscj4phsN4TO8HimilsVSsYgpfrS/BYKQVRdhuoQlIdYrn7c
XBsgJaeuaub+zPWVk+XV+vmNvsDLwTecRqjlYnnOaB2KBhnRPTLU4o/JXpwFqvsG
UiPrGs9gS7JbQiN/TBrBKhSh8uxSe7Vwg0uSsypCAsWFvwWho/nhn2mbC8FivVU2
DOxr6oEQu8MqHw==
-----END CERTIFICATE-----
Generated at Thu Oct 29 09:37:14 2026 by rpki-client