Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/d8398e-232c-45c2-b8e0-9ce4767da2c1/1/pqBDS-vl36Y92njCSk68HSzXNp0.mft
File: pqBDS-vl36Y92njCSk68HSzXNp0.mft (raw, json)
Hash identifier: QbJf7DDbXLvf2ObjvwzvNVLUbG1Ph2qWTd6V/B+j/MM=
Subject key identifier: 7D:39:0B:C5:65:D5:0C:27:94:57:C8:F5:89:4B:99:DB:45:BE:CD:00
Authority key identifier: A6:A0:43:4B:EB:E5:DF:A6:3D:DA:78:C2:4A:4E:BC:1D:2C:D7:36:9D
Certificate issuer: /CN=a6a0434bebe5dfa63dda78c24a4ebc1d2cd7369d
Certificate serial: 019D371B8F70411D77E9F85C6A050A158A70
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pqBDS-vl36Y92njCSk68HSzXNp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/d8398e-232c-45c2-b8e0-9ce4767da2c1/1/pqBDS-vl36Y92njCSk68HSzXNp0.mft
Manifest number: 1893
Signing time: Sun 29 Mar 2026 01:00:46 +0000
Manifest this update: Sun 29 Mar 2026 01:00:46 +0000
Manifest next update: Mon 30 Mar 2026 01:00:46 +0000
Files and hashes: 1: BeeQIAu6NMmjbyOm_zRckXrCzjQ.roa (hash: Ca+da+tqS9qy4+b+qYuDpbM1Gp5JRavJKwLfRW2e9sg=)
2: LEwM1ia3LB4tjMF-xTBddTZwLEI.roa (hash: Dr/U4Sjro7hTaO7vuNctCUrPg7y8M1sJJNCpEq5nKx8=)
3: NnIeD7Oxn1SYizd0wbtW04eiFek.roa (hash: tNo52za6sFrqb7l6ADAKsf1PPEqsHXF944nHimoWDRw=)
4: pqBDS-vl36Y92njCSk68HSzXNp0.crl (hash: OCe0TGVApwcjV9+b8QRU8x4vV0R9W6tk/QjCFA0yGYI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/d8398e-232c-45c2-b8e0-9ce4767da2c1/1/pqBDS-vl36Y92njCSk68HSzXNp0.crl
rsync://rpki.ripe.net/repository/DEFAULT/f4/d8398e-232c-45c2-b8e0-9ce4767da2c1/1/pqBDS-vl36Y92njCSk68HSzXNp0.mft
rsync://rpki.ripe.net/repository/DEFAULT/pqBDS-vl36Y92njCSk68HSzXNp0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 01:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:1b:8f:70:41:1d:77:e9:f8:5c:6a:05:0a:15:8a:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a6a0434bebe5dfa63dda78c24a4ebc1d2cd7369d
Validity
Not Before: Mar 29 01:00:46 2026 GMT
Not After : Mar 30 01:00:46 2026 GMT
Subject: CN=7d390bc565d50c279457c8f5894b99db45becd00
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:68:cc:a5:4c:ca:24:58:88:6d:bd:ed:c3:63:
f3:bd:2a:53:2d:b6:57:d0:59:ba:49:65:0f:95:ef:
b2:47:17:cb:94:5b:7a:e8:9c:30:de:4d:7f:6b:3b:
28:a6:d4:a8:9f:10:a7:98:a3:88:1e:16:ad:df:8d:
c5:9d:fd:03:7f:da:b4:69:ae:41:eb:96:5b:c7:4e:
69:b3:7b:f2:6c:cd:34:83:49:c1:d0:6a:48:f0:67:
62:90:a7:f0:78:52:d6:c0:ea:c7:81:16:45:ca:d8:
a8:9b:55:d1:ef:ef:56:49:40:c2:6f:0a:1b:14:82:
9b:34:df:ac:73:79:b4:bc:5e:13:ad:19:6a:d3:16:
79:95:1a:23:40:79:61:e9:9b:da:d3:ef:4d:4f:f0:
d4:a4:9b:4a:83:bf:b6:e0:8c:2e:b9:6c:10:0f:65:
89:5c:4f:81:9d:df:f0:ef:0b:d8:9f:68:4d:01:8f:
d2:74:c5:30:a0:3e:26:1b:30:bc:9d:1d:94:d8:7e:
02:90:f4:9b:c1:33:25:a0:5c:32:ce:37:00:f4:7d:
97:38:bb:b9:ee:b8:db:fd:66:8d:b9:14:1f:53:cc:
c0:88:85:81:d4:7d:b2:23:45:51:ce:0f:0e:a6:76:
48:17:7a:35:65:25:86:3b:e4:44:bd:60:07:18:8e:
49:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:39:0B:C5:65:D5:0C:27:94:57:C8:F5:89:4B:99:DB:45:BE:CD:00
X509v3 Authority Key Identifier:
keyid:A6:A0:43:4B:EB:E5:DF:A6:3D:DA:78:C2:4A:4E:BC:1D:2C:D7:36:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pqBDS-vl36Y92njCSk68HSzXNp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/d8398e-232c-45c2-b8e0-9ce4767da2c1/1/pqBDS-vl36Y92njCSk68HSzXNp0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/d8398e-232c-45c2-b8e0-9ce4767da2c1/1/pqBDS-vl36Y92njCSk68HSzXNp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a0:ad:59:af:fe:a6:40:51:85:81:34:6a:1d:d9:f1:2f:77:a2:
0e:ea:6b:1d:f2:cf:9e:77:10:de:c2:53:a4:66:f1:a3:17:dc:
a6:8c:be:e5:f1:01:a9:33:77:dc:c9:59:40:6f:7a:5a:b3:05:
3a:4f:ad:67:c6:f1:88:1a:1b:29:48:67:80:98:39:fe:41:1c:
90:1f:81:53:bd:88:80:f0:ca:53:45:aa:dd:fc:bf:9d:28:24:
a2:0a:33:05:fd:5f:83:1a:34:63:93:e8:79:97:33:82:dc:78:
07:8c:be:38:98:8d:81:7b:4d:30:a2:3c:06:56:11:4e:cf:0e:
e5:c5:f8:c3:b0:1b:b4:9b:c8:5d:a4:4b:62:32:06:ca:8f:ff:
60:d3:2f:da:70:58:29:46:60:5d:b6:94:56:90:99:c4:9f:c4:
49:28:e4:60:5f:7d:8f:d2:b7:b2:90:2c:a1:3a:3c:01:a8:0d:
00:11:d9:ad:c4:fd:07:96:33:d7:4f:f8:ac:46:38:88:06:6d:
63:41:de:d9:c0:95:64:a7:d5:ac:4c:1f:9d:f9:11:8b:13:b6:
eb:c8:34:29:fd:aa:2c:a6:57:b8:61:56:34:57:d2:6e:7c:fd:
d8:ab:26:df:aa:81:9e:72:fe:9e:6b:dc:26:f5:f6:9b:3a:20:
69:0d:c2:ed
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ03G49wQR136fhcagUKFYpwMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE2YTA0MzRiZWJlNWRmYTYzZGRhNzhjMjRhNGViYzFkMmNk
NzM2OWQwHhcNMjYwMzI5MDEwMDQ2WhcNMjYwMzMwMDEwMDQ2WjAzMTEwLwYDVQQD
Eyg3ZDM5MGJjNTY1ZDUwYzI3OTQ1N2M4ZjU4OTRiOTlkYjQ1YmVjZDAwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkGjMpUzKJFiIbb3tw2PzvSpTLbZX
0Fm6SWUPle+yRxfLlFt66Jww3k1/azsoptSonxCnmKOIHhat343Fnf0Df9q0aa5B
65Zbx05ps3vybM00g0nB0GpI8GdikKfweFLWwOrHgRZFytiom1XR7+9WSUDCbwob
FIKbNN+sc3m0vF4TrRlq0xZ5lRojQHlh6Zva0+9NT/DUpJtKg7+24IwuuWwQD2WJ
XE+Bnd/w7wvYn2hNAY/SdMUwoD4mGzC8nR2U2H4CkPSbwTMloFwyzjcA9H2XOLu5
7rjb/WaNuRQfU8zAiIWB1H2yI0VRzg8OpnZIF3o1ZSWGO+REvWAHGI5JwwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFH05C8Vl1QwnlFfI9YlLmdtFvs0AMB8GA1UdIwQY
MBaAFKagQ0vr5d+mPdp4wkpOvB0s1zadMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcHFCRFMtdmwzNlk5Mm5qQ1NrNjhIU3pYTnAwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNC9kODM5OGUtMjMyYy00NWMyLWI4ZTAt
OWNlNDc2N2RhMmMxLzEvcHFCRFMtdmwzNlk5Mm5qQ1NrNjhIU3pYTnAwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNC9kODM5OGUtMjMyYy00NWMyLWI4ZTAtOWNlNDc2N2RhMmMx
LzEvcHFCRFMtdmwzNlk5Mm5qQ1NrNjhIU3pYTnAwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAoK1Zr/6m
QFGFgTRqHdnxL3eiDuprHfLPnncQ3sJTpGbxoxfcpoy+5fEBqTN33MlZQG96WrMF
Ok+tZ8bxiBobKUhngJg5/kEckB+BU72IgPDKU0Wq3fy/nSgkogozBf1fgxo0Y5Po
eZczgtx4B4y+OJiNgXtNMKI8BlYRTs8O5cX4w7AbtJvIXaRLYjIGyo//YNMv2nBY
KUZgXbaUVpCZxJ/ESSjkYF99j9K3spAsoTo8AagNABHZrcT9B5Yz10/4rEY4iAZt
Y0He2cCVZKfVrEwfnfkRixO268g0Kf2qLKZXuGFWNFfSbnz92Ksm36qBnnL+nmvc
JvX2mzogaQ3C7Q==
-----END CERTIFICATE-----
Generated at Sun Mar 29 11:16:53 2026 by rpki-client