Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/d8398e-232c-45c2-b8e0-9ce4767da2c1/1/pqBDS-vl36Y92njCSk68HSzXNp0.mft
File: pqBDS-vl36Y92njCSk68HSzXNp0.mft (raw, json)
Hash identifier: Ke3aqWIHtLhtPcejz7B0ybZy+W3pnj6zrTSuOST8B10=
Subject key identifier: 16:01:6D:10:10:EC:61:82:2A:78:26:B3:6F:1C:8F:87:E9:C4:58:0F
Authority key identifier: A6:A0:43:4B:EB:E5:DF:A6:3D:DA:78:C2:4A:4E:BC:1D:2C:D7:36:9D
Certificate issuer: /CN=a6a0434bebe5dfa63dda78c24a4ebc1d2cd7369d
Certificate serial: 019FACAD4E5ECDC591E6F6F6953422923AA5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pqBDS-vl36Y92njCSk68HSzXNp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/d8398e-232c-45c2-b8e0-9ce4767da2c1/1/pqBDS-vl36Y92njCSk68HSzXNp0.mft
Manifest number: 19D9
Signing time: Wed 29 Jul 2026 07:01:06 +0000
Manifest this update: Wed 29 Jul 2026 07:01:06 +0000
Manifest next update: Thu 30 Jul 2026 07:01:06 +0000
Files and hashes: 1: BeeQIAu6NMmjbyOm_zRckXrCzjQ.roa (hash: Ca+da+tqS9qy4+b+qYuDpbM1Gp5JRavJKwLfRW2e9sg=)
2: LEwM1ia3LB4tjMF-xTBddTZwLEI.roa (hash: Dr/U4Sjro7hTaO7vuNctCUrPg7y8M1sJJNCpEq5nKx8=)
3: NnIeD7Oxn1SYizd0wbtW04eiFek.roa (hash: tNo52za6sFrqb7l6ADAKsf1PPEqsHXF944nHimoWDRw=)
4: pqBDS-vl36Y92njCSk68HSzXNp0.crl (hash: KD8jB+7ItZkwM+mRqYst/s/Z8aiLNVhlnPqnScCCuDg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/d8398e-232c-45c2-b8e0-9ce4767da2c1/1/pqBDS-vl36Y92njCSk68HSzXNp0.crl
rsync://rpki.ripe.net/repository/DEFAULT/f4/d8398e-232c-45c2-b8e0-9ce4767da2c1/1/pqBDS-vl36Y92njCSk68HSzXNp0.mft
rsync://rpki.ripe.net/repository/DEFAULT/pqBDS-vl36Y92njCSk68HSzXNp0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ac:ad:4e:5e:cd:c5:91:e6:f6:f6:95:34:22:92:3a:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a6a0434bebe5dfa63dda78c24a4ebc1d2cd7369d
Validity
Not Before: Jul 29 07:01:06 2026 GMT
Not After : Jul 30 07:01:06 2026 GMT
Subject: CN=16016d1010ec61822a7826b36f1c8f87e9c4580f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:5c:f4:cb:e5:b3:24:51:08:ae:b5:ba:f6:b6:
d5:ef:c9:ff:e0:42:2d:7e:71:5f:55:ff:5c:a6:40:
81:9a:17:55:61:b1:f3:ba:b0:c7:be:b6:b1:3e:07:
fe:1c:07:0f:91:fa:40:05:63:06:a9:cf:25:a1:98:
92:22:cf:6e:ed:d3:0f:42:3f:a9:43:19:e8:c3:66:
b8:17:0a:b8:c8:0a:f0:a0:f8:ff:00:d4:34:58:11:
9c:1f:75:24:fb:03:14:ce:d0:7e:b5:2c:34:38:2f:
5f:33:e5:97:a1:6b:cd:18:32:63:74:08:61:71:b8:
cb:0f:90:ee:1e:7a:df:8b:52:5b:b5:24:be:01:db:
12:dd:38:be:7b:83:cc:66:8c:c5:45:a9:6d:57:0b:
f2:87:80:de:e2:af:a7:cd:d3:f3:f1:fc:75:6a:fd:
d3:4e:01:8c:91:0b:5e:d7:9e:84:08:14:bc:99:82:
08:fe:c0:be:ec:03:c2:1b:78:2b:0f:82:c6:b4:7e:
d8:c5:ed:07:7b:74:81:eb:53:43:20:0f:1b:36:9e:
22:4c:a2:52:f6:9a:60:16:ec:bb:01:8c:c1:71:2a:
24:bf:e1:34:1c:99:58:17:4c:b8:53:6d:40:14:fc:
f2:4a:4b:19:8a:81:a5:ac:10:d6:14:d7:4d:9d:94:
3c:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:01:6D:10:10:EC:61:82:2A:78:26:B3:6F:1C:8F:87:E9:C4:58:0F
X509v3 Authority Key Identifier:
keyid:A6:A0:43:4B:EB:E5:DF:A6:3D:DA:78:C2:4A:4E:BC:1D:2C:D7:36:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pqBDS-vl36Y92njCSk68HSzXNp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/d8398e-232c-45c2-b8e0-9ce4767da2c1/1/pqBDS-vl36Y92njCSk68HSzXNp0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/d8398e-232c-45c2-b8e0-9ce4767da2c1/1/pqBDS-vl36Y92njCSk68HSzXNp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:a1:a6:13:57:23:69:66:f6:e8:14:c3:eb:1e:82:45:38:5a:
7b:51:16:12:66:88:f9:70:a2:a4:9a:a1:b1:ce:26:13:fc:3e:
da:5a:fb:64:0b:5f:90:e5:fd:74:5f:63:11:fa:89:f4:52:2d:
e2:ab:d1:6b:8d:69:06:8a:f7:b5:22:16:2f:bc:22:4b:a4:21:
ac:b8:db:d1:42:85:13:e9:af:58:11:05:d1:b2:23:1f:90:aa:
7a:e5:e8:b6:09:7a:36:ee:e1:16:ed:16:cb:d5:ed:50:54:fb:
eb:00:f0:c8:e6:85:4e:03:16:5a:67:5a:ae:e4:3b:0c:d0:fd:
45:c6:02:d9:28:68:99:22:b9:00:c5:ac:78:86:91:f4:96:03:
02:92:17:ee:2d:56:0d:80:3c:62:dc:e0:c9:81:6b:00:6a:3e:
24:87:d6:04:8a:51:b5:e0:7f:66:46:35:c5:4c:d8:96:31:cb:
20:e0:42:1d:b7:70:c8:f5:60:95:97:de:6c:78:dc:76:62:4f:
fc:fe:e9:6b:90:18:4e:6b:50:65:df:02:76:12:50:77:e3:d7:
6f:53:9b:b2:fa:41:d1:fb:8d:ce:ec:cc:69:59:75:db:a0:9c:
82:21:b1:cc:8e:9e:40:d5:2d:bb:a1:5a:e0:72:b4:f2:2d:87:
36:bd:d2:33
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+srU5ezcWR5vb2lTQikjqlMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE2YTA0MzRiZWJlNWRmYTYzZGRhNzhjMjRhNGViYzFkMmNk
NzM2OWQwHhcNMjYwNzI5MDcwMTA2WhcNMjYwNzMwMDcwMTA2WjAzMTEwLwYDVQQD
EygxNjAxNmQxMDEwZWM2MTgyMmE3ODI2YjM2ZjFjOGY4N2U5YzQ1ODBmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs1z0y+WzJFEIrrW69rbV78n/4EIt
fnFfVf9cpkCBmhdVYbHzurDHvraxPgf+HAcPkfpABWMGqc8loZiSIs9u7dMPQj+p
Qxnow2a4Fwq4yArwoPj/ANQ0WBGcH3Uk+wMUztB+tSw0OC9fM+WXoWvNGDJjdAhh
cbjLD5DuHnrfi1JbtSS+AdsS3Ti+e4PMZozFRaltVwvyh4De4q+nzdPz8fx1av3T
TgGMkQte156ECBS8mYII/sC+7APCG3grD4LGtH7Yxe0He3SB61NDIA8bNp4iTKJS
9ppgFuy7AYzBcSokv+E0HJlYF0y4U21AFPzySksZioGlrBDWFNdNnZQ8bwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBYBbRAQ7GGCKngms28cj4fpxFgPMB8GA1UdIwQY
MBaAFKagQ0vr5d+mPdp4wkpOvB0s1zadMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcHFCRFMtdmwzNlk5Mm5qQ1NrNjhIU3pYTnAwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNC9kODM5OGUtMjMyYy00NWMyLWI4ZTAt
OWNlNDc2N2RhMmMxLzEvcHFCRFMtdmwzNlk5Mm5qQ1NrNjhIU3pYTnAwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNC9kODM5OGUtMjMyYy00NWMyLWI4ZTAtOWNlNDc2N2RhMmMx
LzEvcHFCRFMtdmwzNlk5Mm5qQ1NrNjhIU3pYTnAwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgKGmE1cj
aWb26BTD6x6CRThae1EWEmaI+XCipJqhsc4mE/w+2lr7ZAtfkOX9dF9jEfqJ9FIt
4qvRa41pBor3tSIWL7wiS6QhrLjb0UKFE+mvWBEF0bIjH5CqeuXotgl6Nu7hFu0W
y9XtUFT76wDwyOaFTgMWWmdaruQ7DND9RcYC2ShomSK5AMWseIaR9JYDApIX7i1W
DYA8YtzgyYFrAGo+JIfWBIpRteB/ZkY1xUzYljHLIOBCHbdwyPVglZfebHjcdmJP
/P7pa5AYTmtQZd8CdhJQd+PXb1ObsvpB0fuNzuzMaVl126CcgiGxzI6eQNUtu6Fa
4HK08i2HNr3SMw==
-----END CERTIFICATE-----
Generated at Wed Jul 29 08:58:27 2026 by rpki-client