Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/d8398e-232c-45c2-b8e0-9ce4767da2c1/1/pqBDS-vl36Y92njCSk68HSzXNp0.mft
File: pqBDS-vl36Y92njCSk68HSzXNp0.mft (raw, json)
Hash identifier: d1e9l9/TS2tsYglb51JZWFtSRX4Hn6tJDB6ZGPy5pqs=
Subject key identifier: D2:A8:B7:E6:56:F0:7C:1C:61:8F:26:23:4C:95:EE:D9:17:FE:98:0B
Authority key identifier: A6:A0:43:4B:EB:E5:DF:A6:3D:DA:78:C2:4A:4E:BC:1D:2C:D7:36:9D
Certificate issuer: /CN=a6a0434bebe5dfa63dda78c24a4ebc1d2cd7369d
Certificate serial: 019CAA21A6C183FC40CA7060049287C37811
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pqBDS-vl36Y92njCSk68HSzXNp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/d8398e-232c-45c2-b8e0-9ce4767da2c1/1/pqBDS-vl36Y92njCSk68HSzXNp0.mft
Manifest number: 184A
Signing time: Sun 01 Mar 2026 16:00:57 +0000
Manifest this update: Sun 01 Mar 2026 16:00:57 +0000
Manifest next update: Mon 02 Mar 2026 16:00:57 +0000
Files and hashes: 1: BeeQIAu6NMmjbyOm_zRckXrCzjQ.roa (hash: Ca+da+tqS9qy4+b+qYuDpbM1Gp5JRavJKwLfRW2e9sg=)
2: LEwM1ia3LB4tjMF-xTBddTZwLEI.roa (hash: Dr/U4Sjro7hTaO7vuNctCUrPg7y8M1sJJNCpEq5nKx8=)
3: NnIeD7Oxn1SYizd0wbtW04eiFek.roa (hash: tNo52za6sFrqb7l6ADAKsf1PPEqsHXF944nHimoWDRw=)
4: pqBDS-vl36Y92njCSk68HSzXNp0.crl (hash: vTBg579XYMe6p5Yglb4jb/wxd7c44WoK1nLE2jzJUek=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/d8398e-232c-45c2-b8e0-9ce4767da2c1/1/pqBDS-vl36Y92njCSk68HSzXNp0.crl
rsync://rpki.ripe.net/repository/DEFAULT/f4/d8398e-232c-45c2-b8e0-9ce4767da2c1/1/pqBDS-vl36Y92njCSk68HSzXNp0.mft
rsync://rpki.ripe.net/repository/DEFAULT/pqBDS-vl36Y92njCSk68HSzXNp0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 16:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:21:a6:c1:83:fc:40:ca:70:60:04:92:87:c3:78:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a6a0434bebe5dfa63dda78c24a4ebc1d2cd7369d
Validity
Not Before: Mar 1 16:00:57 2026 GMT
Not After : Mar 2 16:00:57 2026 GMT
Subject: CN=d2a8b7e656f07c1c618f26234c95eed917fe980b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:a7:48:9a:92:bf:57:b2:ec:19:1a:3a:de:56:
ea:b4:ea:0c:af:47:d6:e6:8a:78:91:c2:e7:7c:42:
6c:20:d3:c2:46:46:c0:63:70:81:a0:ed:dd:b9:7d:
97:33:6e:12:6a:36:59:c5:ca:ba:ec:ff:f7:d2:2e:
bb:6f:39:2a:3c:c0:b2:cc:d8:61:a1:51:8f:e3:e1:
35:a8:74:63:d5:1f:2d:75:c2:85:f0:c2:6c:0d:a8:
ac:e3:26:a7:37:1d:75:46:76:76:9a:aa:a5:a7:ce:
e1:e6:31:62:52:6b:fc:ee:3a:8b:96:30:57:27:4a:
f8:fd:69:8f:63:62:c4:af:c4:7f:b6:9c:79:ba:66:
7a:eb:c0:f0:5a:25:7a:58:cf:4c:0a:67:bc:31:74:
63:38:b1:cc:04:f8:6d:b5:25:65:ec:cc:c8:3b:1b:
f5:a1:18:b8:56:c2:5e:d8:8b:9c:7f:50:b4:44:f9:
91:95:db:bc:8e:87:ef:46:65:16:08:63:60:6d:2c:
42:6b:4a:bb:13:e9:04:c8:7a:22:65:57:39:5c:1c:
c2:52:b2:6d:35:11:57:ce:22:53:2a:98:2d:d5:1d:
10:c0:be:48:ca:02:63:1b:27:b5:43:11:c1:c8:f7:
de:0d:e1:d8:a9:59:86:0b:ed:c1:77:de:b3:e0:92:
4f:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:A8:B7:E6:56:F0:7C:1C:61:8F:26:23:4C:95:EE:D9:17:FE:98:0B
X509v3 Authority Key Identifier:
keyid:A6:A0:43:4B:EB:E5:DF:A6:3D:DA:78:C2:4A:4E:BC:1D:2C:D7:36:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pqBDS-vl36Y92njCSk68HSzXNp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/d8398e-232c-45c2-b8e0-9ce4767da2c1/1/pqBDS-vl36Y92njCSk68HSzXNp0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/d8398e-232c-45c2-b8e0-9ce4767da2c1/1/pqBDS-vl36Y92njCSk68HSzXNp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:51:45:30:1a:e9:54:72:ca:f4:8e:9e:30:fc:22:02:69:6d:
f3:c0:15:b6:d7:31:34:9a:6d:3f:a4:4e:25:2d:9b:17:12:a1:
c9:78:b2:aa:47:9f:c2:db:c5:d6:5d:b4:47:d1:d4:db:78:61:
17:57:34:b4:37:d1:ae:3d:8d:5d:91:89:d9:ed:60:51:3e:a8:
a6:0a:69:2f:5d:29:1d:57:cd:9d:ff:fa:b3:02:dd:ca:ff:eb:
d0:52:e0:7b:10:90:32:8a:0f:c7:a1:79:90:8a:2e:09:b5:6f:
20:6f:8d:33:12:05:ef:cb:67:e4:d9:8a:94:0e:b9:8b:88:38:
fe:95:71:a5:de:1c:29:57:18:f6:eb:c0:94:87:66:13:77:14:
99:54:e5:91:e0:67:dc:7a:54:a9:37:ff:3a:f9:7e:3a:c9:dd:
ef:23:21:c9:f1:85:6e:41:3f:f7:68:64:1f:1d:6f:93:2d:1c:
3a:e3:01:68:57:0c:60:bb:f1:28:b3:d0:1b:71:7f:c5:4d:d4:
7b:47:15:40:e4:b6:20:90:b2:cc:b8:47:66:68:68:5d:d4:48:
6f:33:96:95:e6:c8:81:9e:30:7f:f5:4e:ce:ae:12:cf:e2:06:
c7:0e:79:98:35:f5:2a:f9:a8:89:fb:b8:70:9a:ab:78:d3:1c:
2f:5a:c4:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 01:58:39 2026 by rpki-client