
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/d8398e-232c-45c2-b8e0-9ce4767da2c1/1/pqBDS-vl36Y92njCSk68HSzXNp0.mft
File: pqBDS-vl36Y92njCSk68HSzXNp0.mft (raw, json)
Hash identifier: eOUeabfQk0+AC5Tlh05+vcjmq6gO2AMO6bFQpvH8RBA=
Subject key identifier: 53:32:5A:77:A7:F2:4B:76:CC:E6:FC:83:51:03:BD:2D:6A:96:88:DB
Authority key identifier: A6:A0:43:4B:EB:E5:DF:A6:3D:DA:78:C2:4A:4E:BC:1D:2C:D7:36:9D
Certificate issuer: /CN=a6a0434bebe5dfa63dda78c24a4ebc1d2cd7369d
Certificate serial: 019D9998F18C7318963BBAEC4A824A7FFFA7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pqBDS-vl36Y92njCSk68HSzXNp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/d8398e-232c-45c2-b8e0-9ce4767da2c1/1/pqBDS-vl36Y92njCSk68HSzXNp0.mft
Manifest number: 18C6
Signing time: Fri 17 Apr 2026 04:00:30 +0000
Manifest this update: Fri 17 Apr 2026 04:00:30 +0000
Manifest next update: Sat 18 Apr 2026 04:00:30 +0000
Files and hashes: 1: BeeQIAu6NMmjbyOm_zRckXrCzjQ.roa (hash: Ca+da+tqS9qy4+b+qYuDpbM1Gp5JRavJKwLfRW2e9sg=)
2: LEwM1ia3LB4tjMF-xTBddTZwLEI.roa (hash: Dr/U4Sjro7hTaO7vuNctCUrPg7y8M1sJJNCpEq5nKx8=)
3: NnIeD7Oxn1SYizd0wbtW04eiFek.roa (hash: tNo52za6sFrqb7l6ADAKsf1PPEqsHXF944nHimoWDRw=)
4: pqBDS-vl36Y92njCSk68HSzXNp0.crl (hash: xuiZG3/OxtSd4LZpibCbrOUEvi4l74eU/kRLHY8BvJs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/d8398e-232c-45c2-b8e0-9ce4767da2c1/1/pqBDS-vl36Y92njCSk68HSzXNp0.crl
rsync://rpki.ripe.net/repository/DEFAULT/f4/d8398e-232c-45c2-b8e0-9ce4767da2c1/1/pqBDS-vl36Y92njCSk68HSzXNp0.mft
rsync://rpki.ripe.net/repository/DEFAULT/pqBDS-vl36Y92njCSk68HSzXNp0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 04:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:98:f1:8c:73:18:96:3b:ba:ec:4a:82:4a:7f:ff:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a6a0434bebe5dfa63dda78c24a4ebc1d2cd7369d
Validity
Not Before: Apr 17 04:00:30 2026 GMT
Not After : Apr 18 04:00:30 2026 GMT
Subject: CN=53325a77a7f24b76cce6fc835103bd2d6a9688db
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:b6:13:d1:ad:25:71:b0:75:46:a6:6a:4b:9e:
91:12:16:44:ea:11:3c:7d:45:08:a9:0e:f6:e7:65:
79:4a:28:93:a8:4f:ea:8d:af:89:f2:5b:d8:e8:4a:
e7:85:dd:ee:39:2b:da:3e:2c:b5:90:6a:3e:d5:ab:
8b:b1:8e:c8:56:41:ab:32:00:09:99:02:32:d7:39:
00:f5:fd:5d:c3:c5:78:92:dd:1b:66:7e:e9:ab:23:
e2:dc:3e:35:db:97:57:ed:9e:dc:b3:08:3f:73:b9:
51:5e:a3:5c:b7:82:7f:d8:f3:23:4e:89:b4:c2:a8:
29:a2:2f:3f:f2:1c:01:44:a5:7e:dc:3d:27:e1:b1:
b3:37:4a:93:35:c6:66:ed:b2:3d:51:13:7a:5f:b6:
e5:da:b3:17:9d:9b:3c:e1:f5:de:0d:a8:2e:59:3c:
e2:2a:39:9b:3a:ac:05:09:ab:91:12:89:78:6e:a2:
29:d6:6b:b8:2d:de:75:a9:83:0c:2d:7d:e0:c4:73:
9c:38:0b:d4:a3:c5:74:19:88:df:50:8b:a3:67:05:
dc:3f:0d:06:2f:44:98:86:35:3b:8b:25:f5:99:af:
8e:f5:cc:bd:ec:25:07:5d:33:da:52:61:b2:01:3b:
1d:30:5e:d6:63:e9:0d:a3:79:ea:ee:70:22:fa:8b:
a1:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:32:5A:77:A7:F2:4B:76:CC:E6:FC:83:51:03:BD:2D:6A:96:88:DB
X509v3 Authority Key Identifier:
keyid:A6:A0:43:4B:EB:E5:DF:A6:3D:DA:78:C2:4A:4E:BC:1D:2C:D7:36:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pqBDS-vl36Y92njCSk68HSzXNp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/d8398e-232c-45c2-b8e0-9ce4767da2c1/1/pqBDS-vl36Y92njCSk68HSzXNp0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/d8398e-232c-45c2-b8e0-9ce4767da2c1/1/pqBDS-vl36Y92njCSk68HSzXNp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:0a:f2:c6:ef:f6:ce:92:ab:a0:cc:4d:33:99:2e:58:86:12:
03:4c:be:71:49:82:29:b6:19:ef:1f:b8:9b:9a:bc:ec:45:67:
7e:c5:c8:66:16:28:f2:e1:be:da:7b:33:d6:55:24:35:f6:09:
fc:06:ee:8f:e0:79:db:f7:6f:9d:c6:c8:d0:41:6b:bf:e1:c5:
74:f6:12:86:2e:6b:46:71:97:b5:b9:60:9d:df:91:6d:47:0f:
57:c7:76:1f:e0:4d:10:c3:32:af:ed:60:cc:95:9c:81:66:f7:
b7:9d:75:45:bc:52:8a:e6:fa:8f:93:1d:9d:d5:38:8f:bf:22:
8f:80:b3:5c:e4:8c:85:ae:58:57:86:5e:e2:2a:43:99:f6:b7:
b8:19:05:1c:b6:4c:5e:38:00:a4:f0:ca:16:bf:f7:0c:08:47:
66:7f:06:2e:62:37:78:ba:02:94:ea:f0:c5:0f:43:91:2e:58:
87:ee:cf:df:7e:bc:c7:5a:27:1e:5c:1d:a7:85:7a:14:d3:9a:
38:77:0d:de:87:d1:85:77:06:40:9e:9f:04:9a:e6:5e:49:94:
27:57:14:32:77:b0:5b:33:57:a8:45:63:40:2f:c6:56:17:4f:
33:87:0b:c8:63:99:83:72:8f:f2:4f:4a:3a:95:f9:fa:cb:81:
c9:32:a2:50
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2ZmPGMcxiWO7rsSoJKf/+nMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE2YTA0MzRiZWJlNWRmYTYzZGRhNzhjMjRhNGViYzFkMmNk
NzM2OWQwHhcNMjYwNDE3MDQwMDMwWhcNMjYwNDE4MDQwMDMwWjAzMTEwLwYDVQQD
Eyg1MzMyNWE3N2E3ZjI0Yjc2Y2NlNmZjODM1MTAzYmQyZDZhOTY4OGRiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm7YT0a0lcbB1RqZqS56REhZE6hE8
fUUIqQ7252V5SiiTqE/qja+J8lvY6Ernhd3uOSvaPiy1kGo+1auLsY7IVkGrMgAJ
mQIy1zkA9f1dw8V4kt0bZn7pqyPi3D4125dX7Z7cswg/c7lRXqNct4J/2PMjTom0
wqgpoi8/8hwBRKV+3D0n4bGzN0qTNcZm7bI9URN6X7bl2rMXnZs84fXeDaguWTzi
KjmbOqwFCauREol4bqIp1mu4Ld51qYMMLX3gxHOcOAvUo8V0GYjfUIujZwXcPw0G
L0SYhjU7iyX1ma+O9cy97CUHXTPaUmGyATsdMF7WY+kNo3nq7nAi+ouhBQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFMyWnen8kt2zOb8g1EDvS1qlojbMB8GA1UdIwQY
MBaAFKagQ0vr5d+mPdp4wkpOvB0s1zadMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcHFCRFMtdmwzNlk5Mm5qQ1NrNjhIU3pYTnAwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNC9kODM5OGUtMjMyYy00NWMyLWI4ZTAt
OWNlNDc2N2RhMmMxLzEvcHFCRFMtdmwzNlk5Mm5qQ1NrNjhIU3pYTnAwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNC9kODM5OGUtMjMyYy00NWMyLWI4ZTAtOWNlNDc2N2RhMmMx
LzEvcHFCRFMtdmwzNlk5Mm5qQ1NrNjhIU3pYTnAwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALgryxu/2
zpKroMxNM5kuWIYSA0y+cUmCKbYZ7x+4m5q87EVnfsXIZhYo8uG+2nsz1lUkNfYJ
/Abuj+B52/dvncbI0EFrv+HFdPYShi5rRnGXtblgnd+RbUcPV8d2H+BNEMMyr+1g
zJWcgWb3t511RbxSiub6j5MdndU4j78ij4CzXOSMha5YV4Ze4ipDmfa3uBkFHLZM
XjgApPDKFr/3DAhHZn8GLmI3eLoClOrwxQ9DkS5Yh+7P3368x1onHlwdp4V6FNOa
OHcN3ofRhXcGQJ6fBJrmXkmUJ1cUMnewWzNXqEVjQC/GVhdPM4cLyGOZg3KP8k9K
OpX5+suByTKiUA==
-----END CERTIFICATE-----
Generated at Fri Apr 17 12:18:48 2026 by rpki-client