Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f4/d8398e-232c-45c2-b8e0-9ce4767da2c1/1/pqBDS-vl36Y92njCSk68HSzXNp0.mft
File: pqBDS-vl36Y92njCSk68HSzXNp0.mft (raw, json)
Hash identifier: iO77gKs1EP9YMGSg1jH6aK3kR9e6pCXn4YKKxN44sCQ=
Subject key identifier: D9:DD:14:25:F7:33:14:9E:5A:70:78:C3:E9:56:C4:A3:2D:81:B5:E4
Authority key identifier: A6:A0:43:4B:EB:E5:DF:A6:3D:DA:78:C2:4A:4E:BC:1D:2C:D7:36:9D
Certificate issuer: /CN=a6a0434bebe5dfa63dda78c24a4ebc1d2cd7369d
Certificate serial: 01A1800673009553A4B16F0BED44A8BEA798
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pqBDS-vl36Y92njCSk68HSzXNp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/d8398e-232c-45c2-b8e0-9ce4767da2c1/1/pqBDS-vl36Y92njCSk68HSzXNp0.mft
Manifest number: 1ACB
Signing time: Wed 28 Oct 2026 01:01:08 +0000
Manifest this update: Wed 28 Oct 2026 01:01:08 +0000
Manifest next update: Thu 29 Oct 2026 01:01:08 +0000
Files and hashes: 1: BeeQIAu6NMmjbyOm_zRckXrCzjQ.roa (hash: Ca+da+tqS9qy4+b+qYuDpbM1Gp5JRavJKwLfRW2e9sg=)
2: LEwM1ia3LB4tjMF-xTBddTZwLEI.roa (hash: Dr/U4Sjro7hTaO7vuNctCUrPg7y8M1sJJNCpEq5nKx8=)
3: NnIeD7Oxn1SYizd0wbtW04eiFek.roa (hash: tNo52za6sFrqb7l6ADAKsf1PPEqsHXF944nHimoWDRw=)
4: pqBDS-vl36Y92njCSk68HSzXNp0.crl (hash: OmJVhK6U3PncEatnjd1r5VXsbWBsjLSMmtr5dXwa1Eg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/d8398e-232c-45c2-b8e0-9ce4767da2c1/1/pqBDS-vl36Y92njCSk68HSzXNp0.crl
rsync://rpki.ripe.net/repository/DEFAULT/f4/d8398e-232c-45c2-b8e0-9ce4767da2c1/1/pqBDS-vl36Y92njCSk68HSzXNp0.mft
rsync://rpki.ripe.net/repository/DEFAULT/pqBDS-vl36Y92njCSk68HSzXNp0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 29 Oct 2026 01:01:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:80:06:73:00:95:53:a4:b1:6f:0b:ed:44:a8:be:a7:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a6a0434bebe5dfa63dda78c24a4ebc1d2cd7369d
Validity
Not Before: Oct 28 01:01:08 2026 GMT
Not After : Oct 29 01:01:08 2026 GMT
Subject: CN=d9dd1425f733149e5a7078c3e956c4a32d81b5e4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:57:63:74:9d:96:46:0d:d3:aa:b9:b7:af:08:
f3:2d:cd:d5:b8:96:c8:9f:dd:f8:74:a8:56:d9:11:
d3:7f:81:fc:91:cd:e1:e5:86:c7:ca:9e:71:e7:a2:
7c:5b:68:ae:ee:c7:58:27:28:5a:e1:e8:89:f2:2f:
7e:b7:15:cc:d9:c3:63:d5:58:a8:0a:ab:66:6a:c5:
ae:71:41:b7:bf:0a:94:0b:83:ac:da:38:e6:4f:ba:
82:1c:cc:ca:a7:0a:3e:f8:2c:76:bd:8b:ea:03:ff:
f5:d9:e4:4e:e6:a9:8f:16:ca:b8:95:52:04:58:ed:
17:1f:2e:a7:0b:73:7f:ae:82:0c:b6:ab:5e:85:f5:
85:8b:83:73:42:9e:18:73:e8:e4:69:f1:97:73:cf:
7a:ad:bf:af:8c:3d:46:db:74:f1:9b:e1:09:dc:41:
a4:8d:f8:c3:e2:53:d6:ed:0e:82:38:05:9a:c9:13:
cf:a2:a4:5e:0d:08:03:da:01:87:04:f5:cf:65:cf:
38:be:ed:0f:cd:84:b0:c8:f3:e8:ed:e1:fa:d9:cc:
8a:3f:59:e6:1d:c9:28:ee:62:d7:22:92:3b:9f:fd:
9c:27:8c:f4:a3:27:ae:8c:9e:d6:86:f1:09:c5:a3:
9b:7d:95:9d:5c:e7:fa:fa:a8:1f:95:8a:e6:5a:bc:
ed:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:DD:14:25:F7:33:14:9E:5A:70:78:C3:E9:56:C4:A3:2D:81:B5:E4
X509v3 Authority Key Identifier:
keyid:A6:A0:43:4B:EB:E5:DF:A6:3D:DA:78:C2:4A:4E:BC:1D:2C:D7:36:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pqBDS-vl36Y92njCSk68HSzXNp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/d8398e-232c-45c2-b8e0-9ce4767da2c1/1/pqBDS-vl36Y92njCSk68HSzXNp0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/d8398e-232c-45c2-b8e0-9ce4767da2c1/1/pqBDS-vl36Y92njCSk68HSzXNp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:08:71:07:ae:c9:19:55:e6:1f:9c:14:70:92:91:7f:2c:ad:
af:14:4b:92:38:bd:0a:2d:f6:59:f1:92:54:fa:53:f3:0c:38:
a4:c1:31:71:59:c4:f7:3e:34:17:cd:b2:e2:ed:9b:55:f6:cd:
f4:aa:dd:1a:4c:02:f0:ea:bc:5a:7c:14:16:36:f4:7f:ab:a9:
a4:fb:11:cc:de:3c:9d:28:fa:59:dd:9c:18:38:2f:2b:3f:97:
9d:12:8d:fd:60:b0:ff:29:5d:65:f6:dc:44:a1:0d:85:2b:aa:
59:84:a6:ca:22:a5:2c:a3:bc:ac:7f:3a:f8:0f:1e:15:2d:da:
40:68:79:42:e6:ea:27:6b:94:bf:40:ef:44:74:a3:f0:93:97:
f0:50:cf:66:87:ab:46:8c:82:72:b7:10:55:41:2f:37:7f:16:
e5:7f:0b:79:c8:40:5e:3a:e2:7e:22:6a:53:d9:64:43:74:85:
eb:ba:b0:04:31:8d:15:3f:79:8b:7d:ba:e2:af:a9:47:11:c4:
14:bb:7c:fb:42:df:b8:4a:70:0e:54:9d:bd:5f:0e:f0:dd:23:
6d:ff:1b:c3:1f:36:19:bd:bc:d4:77:cd:ba:92:f4:c4:48:fc:
14:7e:41:97:15:46:d4:77:b3:46:6b:58:57:2c:95:ee:44:d6:
ca:9e:7d:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 28 11:49:58 2026 by rpki-client