Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f4/d8398e-232c-45c2-b8e0-9ce4767da2c1/1/pqBDS-vl36Y92njCSk68HSzXNp0.mft
File: pqBDS-vl36Y92njCSk68HSzXNp0.mft (raw, json)
Hash identifier: lMhYz0TupO/EiYOBb3cMp74TVFhDk6MxL3FNYqJxEnA=
Subject key identifier: 83:AE:50:B3:73:DF:FF:88:F9:E1:46:97:0A:2C:1E:C6:99:98:14:EA
Authority key identifier: A6:A0:43:4B:EB:E5:DF:A6:3D:DA:78:C2:4A:4E:BC:1D:2C:D7:36:9D
Certificate issuer: /CN=a6a0434bebe5dfa63dda78c24a4ebc1d2cd7369d
Certificate serial: 01A0ED416EF820A57785106D945DC5ED6F78
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pqBDS-vl36Y92njCSk68HSzXNp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/d8398e-232c-45c2-b8e0-9ce4767da2c1/1/pqBDS-vl36Y92njCSk68HSzXNp0.mft
Manifest number: 1A7F
Signing time: Tue 29 Sep 2026 13:01:23 +0000
Manifest this update: Tue 29 Sep 2026 13:01:23 +0000
Manifest next update: Wed 30 Sep 2026 13:01:23 +0000
Files and hashes: 1: BeeQIAu6NMmjbyOm_zRckXrCzjQ.roa (hash: Ca+da+tqS9qy4+b+qYuDpbM1Gp5JRavJKwLfRW2e9sg=)
2: LEwM1ia3LB4tjMF-xTBddTZwLEI.roa (hash: Dr/U4Sjro7hTaO7vuNctCUrPg7y8M1sJJNCpEq5nKx8=)
3: NnIeD7Oxn1SYizd0wbtW04eiFek.roa (hash: tNo52za6sFrqb7l6ADAKsf1PPEqsHXF944nHimoWDRw=)
4: pqBDS-vl36Y92njCSk68HSzXNp0.crl (hash: QRTLjyMtifqwWqwh+sXNJZVxCHmyT2DlcgoYTYplFrU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/d8398e-232c-45c2-b8e0-9ce4767da2c1/1/pqBDS-vl36Y92njCSk68HSzXNp0.crl
rsync://rpki.ripe.net/repository/DEFAULT/f4/d8398e-232c-45c2-b8e0-9ce4767da2c1/1/pqBDS-vl36Y92njCSk68HSzXNp0.mft
rsync://rpki.ripe.net/repository/DEFAULT/pqBDS-vl36Y92njCSk68HSzXNp0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Sep 2026 13:01:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ed:41:6e:f8:20:a5:77:85:10:6d:94:5d:c5:ed:6f:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a6a0434bebe5dfa63dda78c24a4ebc1d2cd7369d
Validity
Not Before: Sep 29 13:01:23 2026 GMT
Not After : Sep 30 13:01:23 2026 GMT
Subject: CN=83ae50b373dfff88f9e146970a2c1ec6999814ea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:af:97:3a:8c:0a:5d:2b:89:21:41:9d:4c:62:
70:3c:8e:cd:b2:e6:ba:93:2d:9d:b6:7b:74:3f:fa:
fb:96:19:74:45:7e:5b:6a:c2:81:33:68:a3:b1:13:
b5:68:65:61:bd:c5:1f:4e:a3:4a:6b:ff:c4:52:b7:
f2:a7:56:be:31:59:87:7b:dc:a9:d4:3b:f9:9e:33:
b6:70:0a:8a:b3:d0:84:ff:67:43:e5:88:43:bf:bf:
7c:cc:20:0d:2e:a2:fa:a8:5c:5d:38:00:ac:9c:5f:
75:02:fb:9f:09:73:99:bf:d0:81:a6:5b:d8:e9:07:
30:b6:06:97:8c:49:24:e1:85:0e:b5:42:d7:b7:ed:
c1:8f:61:6a:96:20:6e:b3:7e:c7:fe:ae:b6:4c:94:
4c:6e:82:ea:2e:ef:75:a6:33:09:9a:d1:20:95:08:
11:d9:e8:2c:02:e2:20:75:89:b7:63:91:43:24:b4:
8c:97:e8:48:8d:aa:2d:fd:b8:3e:c0:e9:44:47:61:
7f:ef:c7:bd:d3:97:f8:59:b8:21:85:cc:61:86:9a:
d8:b6:73:93:f2:b7:9d:5f:0d:80:d4:2f:71:a6:a7:
b6:d2:84:ee:e4:49:5a:2f:a7:8a:36:65:41:9f:53:
a7:41:45:3c:01:0d:40:11:b5:57:a2:b1:a2:80:bf:
b4:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:AE:50:B3:73:DF:FF:88:F9:E1:46:97:0A:2C:1E:C6:99:98:14:EA
X509v3 Authority Key Identifier:
keyid:A6:A0:43:4B:EB:E5:DF:A6:3D:DA:78:C2:4A:4E:BC:1D:2C:D7:36:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pqBDS-vl36Y92njCSk68HSzXNp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/d8398e-232c-45c2-b8e0-9ce4767da2c1/1/pqBDS-vl36Y92njCSk68HSzXNp0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/d8398e-232c-45c2-b8e0-9ce4767da2c1/1/pqBDS-vl36Y92njCSk68HSzXNp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:0d:d3:87:3c:04:6e:41:2f:7e:a7:f1:24:a9:de:21:cf:f4:
7a:ca:d1:65:ed:8b:b6:74:96:b1:78:91:56:69:af:3d:b3:37:
05:f4:0b:56:da:d3:59:8b:38:e5:d9:38:48:88:25:bf:d5:35:
76:4c:07:bf:ef:5c:dc:0e:8a:d2:0d:f7:6c:15:07:2c:39:72:
97:c9:84:1b:a7:0c:7d:3c:d1:6f:98:94:72:90:70:02:31:d8:
96:af:25:33:f1:c8:7a:a9:44:89:f6:9c:1e:a3:5f:fc:18:6d:
56:5a:d6:ac:63:ea:7e:83:20:65:f0:80:c4:f9:25:0e:e7:04:
f8:c9:a4:85:31:ea:77:8d:05:d2:69:fe:49:fa:5e:43:57:0f:
f6:38:a6:bc:43:07:63:6b:cd:5a:b2:60:3a:f8:3d:f3:10:00:
85:e8:5f:24:40:a1:01:e4:d6:fb:4a:25:8c:45:e3:cc:f9:2c:
f5:3a:37:f4:86:82:91:cd:ec:92:29:0d:6d:33:5e:b6:4e:1d:
9e:67:02:da:f0:4f:c8:01:16:2c:12:7d:9d:65:f9:bb:ca:b5:
f3:9e:31:31:69:82:12:9e:20:5b:75:68:ff:5d:f6:d6:95:66:
72:b1:60:b2:29:e6:c4:7d:09:64:2f:33:79:44:e5:62:4b:af:
c3:c4:61:6f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDtQW74IKV3hRBtlF3F7W94MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE2YTA0MzRiZWJlNWRmYTYzZGRhNzhjMjRhNGViYzFkMmNk
NzM2OWQwHhcNMjYwOTI5MTMwMTIzWhcNMjYwOTMwMTMwMTIzWjAzMTEwLwYDVQQD
Eyg4M2FlNTBiMzczZGZmZjg4ZjllMTQ2OTcwYTJjMWVjNjk5OTgxNGVhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAza+XOowKXSuJIUGdTGJwPI7Nsua6
ky2dtnt0P/r7lhl0RX5basKBM2ijsRO1aGVhvcUfTqNKa//EUrfyp1a+MVmHe9yp
1Dv5njO2cAqKs9CE/2dD5YhDv798zCANLqL6qFxdOACsnF91AvufCXOZv9CBplvY
6QcwtgaXjEkk4YUOtULXt+3Bj2FqliBus37H/q62TJRMboLqLu91pjMJmtEglQgR
2egsAuIgdYm3Y5FDJLSMl+hIjaot/bg+wOlER2F/78e905f4WbghhcxhhprYtnOT
8redXw2A1C9xpqe20oTu5ElaL6eKNmVBn1OnQUU8AQ1AEbVXorGigL+0VwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIOuULNz3/+I+eFGlwosHsaZmBTqMB8GA1UdIwQY
MBaAFKagQ0vr5d+mPdp4wkpOvB0s1zadMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcHFCRFMtdmwzNlk5Mm5qQ1NrNjhIU3pYTnAwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNC9kODM5OGUtMjMyYy00NWMyLWI4ZTAt
OWNlNDc2N2RhMmMxLzEvcHFCRFMtdmwzNlk5Mm5qQ1NrNjhIU3pYTnAwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNC9kODM5OGUtMjMyYy00NWMyLWI4ZTAtOWNlNDc2N2RhMmMx
LzEvcHFCRFMtdmwzNlk5Mm5qQ1NrNjhIU3pYTnAwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALw3ThzwE
bkEvfqfxJKneIc/0esrRZe2LtnSWsXiRVmmvPbM3BfQLVtrTWYs45dk4SIglv9U1
dkwHv+9c3A6K0g33bBUHLDlyl8mEG6cMfTzRb5iUcpBwAjHYlq8lM/HIeqlEifac
HqNf/BhtVlrWrGPqfoMgZfCAxPklDucE+MmkhTHqd40F0mn+SfpeQ1cP9jimvEMH
Y2vNWrJgOvg98xAAhehfJEChAeTW+0oljEXjzPks9To39IaCkc3skikNbTNetk4d
nmcC2vBPyAEWLBJ9nWX5u8q1854xMWmCEp4gW3Vo/1321pVmcrFgsinmxH0JZC8z
eUTlYkuvw8Rhbw==
-----END CERTIFICATE-----
Generated at Wed Sep 30 00:58:06 2026 by rpki-client