Manifest
$ rpki-client -vvvf rsync.krill.clnexus.dev/repo/CLNexus/0/3DB14C691888B4AD8A6F00F3305184FA3C64833F.mft
File: 3DB14C691888B4AD8A6F00F3305184FA3C64833F.mft (raw, json)
Hash identifier: bA1RnUCpM2UAzzkjwb7E67BjnUf/yr2MAa/uVgusclw=
Subject key identifier: 6A:C9:3B:37:78:51:6E:BE:74:2A:F2:06:1B:B3:CD:DF:2B:60:C0:01
Authority key identifier: 3D:B1:4C:69:18:88:B4:AD:8A:6F:00:F3:30:51:84:FA:3C:64:83:3F
Certificate issuer: /CN=3db14c691888b4ad8a6f00f3305184fa3c64833f
Certificate serial: 7270D68310E14ADD86F768CE1977DEC21471B74F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PbFMaRiItK2KbwDzMFGE-jxkgz8.cer
Subject info access: rsync://rsync.krill.clnexus.dev/repo/CLNexus/0/3DB14C691888B4AD8A6F00F3305184FA3C64833F.mft
Manifest number: 72
Signing time: Thu 24 Sep 2026 18:59:40 +0000
Manifest this update: Thu 24 Sep 2026 18:54:40 +0000
Manifest next update: Fri 25 Sep 2026 22:18:40 +0000
Files and hashes: 1: 3DB14C691888B4AD8A6F00F3305184FA3C64833F.crl (hash: 8zTsxwuJsDI0ZLadnB056Fs8dK5jyP5EygvmzLDT5d4=)
2: AS214420.asa (hash: C65jtOjBlpPjRzqYy4fJANSK9FHM6Yz6hs95qtJ1op4=)
Validation: OK
Signature path: rsync://rsync.krill.clnexus.dev/repo/CLNexus/0/3DB14C691888B4AD8A6F00F3305184FA3C64833F.crl
rsync://rsync.krill.clnexus.dev/repo/CLNexus/0/3DB14C691888B4AD8A6F00F3305184FA3C64833F.mft
rsync://rpki.ripe.net/repository/DEFAULT/PbFMaRiItK2KbwDzMFGE-jxkgz8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 21:08:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
72:70:d6:83:10:e1:4a:dd:86:f7:68:ce:19:77:de:c2:14:71:b7:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3db14c691888b4ad8a6f00f3305184fa3c64833f
Validity
Not Before: Sep 24 18:54:40 2026 GMT
Not After : Sep 25 22:18:40 2026 GMT
Subject: CN=6AC93B3778516EBE742AF2061BB3CDDF2B60C001
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:a5:01:55:bc:71:6a:c9:ec:06:77:16:11:55:
1c:40:b0:8c:92:e1:5e:6f:41:2d:39:a6:fc:d2:5c:
89:46:44:02:76:7c:5b:da:91:d4:78:85:ac:c1:2e:
73:ee:83:e7:80:ca:6a:54:c5:7d:33:26:25:f1:a4:
ba:d9:1a:37:b7:94:fa:07:b6:82:c6:78:46:aa:5d:
f7:27:16:f0:52:0a:6f:63:27:77:86:72:83:47:eb:
3c:ad:bb:d7:02:da:da:24:d8:aa:68:7e:fc:d4:b1:
67:73:04:d5:a0:81:eb:f5:db:68:fc:86:1e:32:fb:
24:9c:fb:5c:12:d9:5e:99:89:98:b6:a9:c5:16:17:
a3:d4:3a:4b:09:88:f7:10:de:d6:58:85:93:50:d5:
ba:62:3d:84:cc:4e:33:1b:6c:0d:62:c8:6d:a4:cb:
b8:5e:f9:18:fe:f9:4e:e7:b5:d5:97:50:00:0d:f8:
fb:fa:d3:a5:9a:fd:a5:23:42:1b:cc:7f:58:43:d1:
05:5d:13:2c:e1:e7:6b:e5:27:78:2f:3e:c8:3e:0a:
c4:f3:f0:00:30:d4:44:6b:e1:71:dc:32:6f:c0:14:
49:75:13:1d:ce:bc:3b:85:f8:89:e3:f5:f0:24:8f:
68:a9:f0:76:16:49:cd:02:36:1c:a2:a0:44:f6:5b:
b3:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:C9:3B:37:78:51:6E:BE:74:2A:F2:06:1B:B3:CD:DF:2B:60:C0:01
X509v3 Authority Key Identifier:
keyid:3D:B1:4C:69:18:88:B4:AD:8A:6F:00:F3:30:51:84:FA:3C:64:83:3F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.krill.clnexus.dev/repo/CLNexus/0/3DB14C691888B4AD8A6F00F3305184FA3C64833F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PbFMaRiItK2KbwDzMFGE-jxkgz8.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.krill.clnexus.dev/repo/CLNexus/0/3DB14C691888B4AD8A6F00F3305184FA3C64833F.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:b6:e0:0c:f1:c9:f2:33:bd:8a:9b:12:08:ce:24:09:69:cf:
f6:cf:b5:9e:c5:18:35:ee:1c:e9:a7:68:a0:67:f5:04:80:5c:
8a:8e:37:37:15:33:b7:df:1f:7d:93:65:f7:5c:b4:90:af:cd:
e3:81:8e:35:b5:99:16:b5:d0:51:ce:95:eb:3e:61:ee:8d:4a:
52:50:26:8d:0d:79:fe:e1:01:ab:15:ee:ab:3f:27:e5:65:f0:
0f:90:59:ab:9e:cb:30:9f:3f:d6:d5:50:d0:6a:87:58:e9:17:
44:c3:80:0a:77:bd:d2:f7:45:10:71:2a:02:bb:bd:3f:a6:87:
25:88:2e:86:f0:94:35:40:94:10:a0:48:f1:52:ad:bb:0a:5c:
06:a5:f2:2e:38:d2:7a:61:8f:35:20:c8:f6:28:4c:13:8e:a2:
69:99:44:95:ec:63:5e:1c:01:9a:7e:e0:6c:bb:db:2a:fa:79:
1d:62:37:6c:8c:15:d5:34:f0:5f:14:4d:b1:a1:7b:ad:ba:1f:
7f:78:a4:91:58:82:7d:e7:92:9d:af:f3:98:a4:84:20:a5:3b:
f9:eb:36:fa:7a:fb:a3:5f:9d:af:e1:c1:10:bf:6d:41:6f:c6:
8f:87:52:05:f2:c8:9e:d0:3f:56:fb:04:e6:65:43:8c:b4:d9:
56:59:bd:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 01:43:01 2026 by rpki-client