Manifest
$ rpki-client -vvvf rsync.krill.clnexus.dev/repo/CLNexus/0/3DB14C691888B4AD8A6F00F3305184FA3C64833F.mft
File: 3DB14C691888B4AD8A6F00F3305184FA3C64833F.mft (raw, json)
Hash identifier: WHXxbpJFI9s8q8q1PPvcWzyVOLZ3284Dlxu+P2Knahg=
Subject key identifier: 58:73:3B:8D:AF:2D:6E:91:A5:4C:55:91:77:3A:A5:37:DE:ED:88:CE
Authority key identifier: 3D:B1:4C:69:18:88:B4:AD:8A:6F:00:F3:30:51:84:FA:3C:64:83:3F
Certificate issuer: /CN=3db14c691888b4ad8a6f00f3305184fa3c64833f
Certificate serial: 77C45B2CDEE77E04F49011B10F359282328B2B3D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PbFMaRiItK2KbwDzMFGE-jxkgz8.cer
Subject info access: rsync://rsync.krill.clnexus.dev/repo/CLNexus/0/3DB14C691888B4AD8A6F00F3305184FA3C64833F.mft
Manifest number: B6
Signing time: Sun 15 Nov 2026 03:12:36 +0000
Manifest this update: Sun 15 Nov 2026 03:07:36 +0000
Manifest next update: Mon 16 Nov 2026 06:50:36 +0000
Files and hashes: 1: AS214420.asa (hash: 66v4OmHeTbbUr0HH9Y7Fajs3vTe+G9nD/0Jt+f7fWpg=)
2: 3DB14C691888B4AD8A6F00F3305184FA3C64833F.crl (hash: qH9qRYA11CigACSxhFYPabzb0dNwcc6IHwksj+fMDDc=)
Validation: OK
Signature path: rsync://rsync.krill.clnexus.dev/repo/CLNexus/0/3DB14C691888B4AD8A6F00F3305184FA3C64833F.crl
rsync://rsync.krill.clnexus.dev/repo/CLNexus/0/3DB14C691888B4AD8A6F00F3305184FA3C64833F.mft
rsync://rpki.ripe.net/repository/DEFAULT/PbFMaRiItK2KbwDzMFGE-jxkgz8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 06:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
77:c4:5b:2c:de:e7:7e:04:f4:90:11:b1:0f:35:92:82:32:8b:2b:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3db14c691888b4ad8a6f00f3305184fa3c64833f
Validity
Not Before: Nov 15 03:07:36 2026 GMT
Not After : Nov 16 06:50:36 2026 GMT
Subject: CN=58733B8DAF2D6E91A54C5591773AA537DEED88CE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:36:84:30:a9:2d:ef:1d:a5:f8:7a:f4:53:05:
e0:21:7d:f9:19:2d:b6:4c:e2:69:da:1d:ec:2e:37:
36:1c:64:de:68:e1:ae:28:c4:35:a4:1d:af:0e:07:
b3:ac:46:10:9b:75:f7:83:1a:65:39:20:d2:a8:33:
92:83:94:77:0e:54:c8:a9:45:24:37:02:85:70:7c:
32:29:06:82:d6:12:87:fa:d2:eb:01:3f:81:34:fd:
94:cb:0f:f3:7c:2a:ce:b0:da:a5:4b:17:36:ab:d5:
55:bf:82:24:bc:39:e0:b7:fe:49:28:ca:6b:aa:74:
33:c5:d2:49:b7:5b:0d:81:de:1e:e2:6f:f9:22:5b:
d7:1a:aa:8b:2d:9a:70:80:ec:50:04:1d:79:4a:fc:
46:56:46:f0:14:1d:3e:1f:89:2b:88:40:d2:c9:ee:
aa:f9:82:36:17:29:95:a4:bd:30:42:5a:45:47:86:
58:7f:dd:d5:ef:bd:64:cb:8d:ae:91:45:e9:5c:fd:
9f:61:a4:c7:3d:7e:49:12:cf:46:d1:d9:ca:07:3c:
a0:71:f6:e4:28:e6:29:73:51:d1:e8:b9:80:e3:d0:
d9:d7:2a:c4:ee:3c:01:89:09:a8:29:c6:d8:39:f8:
94:cf:57:d7:a8:98:4d:e9:b0:3c:10:8c:8a:37:73:
70:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:73:3B:8D:AF:2D:6E:91:A5:4C:55:91:77:3A:A5:37:DE:ED:88:CE
X509v3 Authority Key Identifier:
keyid:3D:B1:4C:69:18:88:B4:AD:8A:6F:00:F3:30:51:84:FA:3C:64:83:3F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.krill.clnexus.dev/repo/CLNexus/0/3DB14C691888B4AD8A6F00F3305184FA3C64833F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PbFMaRiItK2KbwDzMFGE-jxkgz8.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.krill.clnexus.dev/repo/CLNexus/0/3DB14C691888B4AD8A6F00F3305184FA3C64833F.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bc:44:1e:36:25:9b:49:17:4c:19:02:17:bb:30:f4:2e:01:99:
5d:4f:0f:73:63:48:ff:67:ea:3e:ac:c8:29:76:d3:a6:ab:10:
08:32:18:b4:7c:a2:10:09:7c:5a:9e:c5:e9:21:a9:79:23:c5:
60:16:e0:c1:d1:95:d1:84:b3:24:75:cf:57:f1:53:e2:a9:2a:
7e:27:10:62:91:e7:d3:64:08:ae:b0:79:34:fe:dd:e2:8e:ed:
ae:a8:10:56:27:6a:c9:03:55:1c:31:ac:95:56:a4:13:8e:20:
ba:10:5e:67:dd:91:18:2a:92:a0:63:85:7a:3b:27:14:4b:8c:
30:63:08:16:f4:15:6f:45:5f:4b:4f:b7:6d:ec:0e:2e:13:14:
c9:99:a2:9e:c7:61:d5:48:05:4e:6b:13:dc:53:19:35:be:41:
f8:73:c2:15:29:20:d3:80:ed:c5:69:25:9c:8e:b8:85:d0:2c:
e8:98:76:90:f2:51:2e:6b:8b:c5:3b:b1:30:3f:4c:34:e9:18:
74:e4:67:32:2b:8e:57:67:e5:c6:bd:5c:f1:50:e7:05:b6:9e:
42:0a:b9:2f:90:ab:19:b1:42:bd:cf:15:ee:bb:c5:a7:1b:4f:
1b:f4:cd:86:aa:1a:2f:f2:f2:2d:eb:a3:fc:fb:2e:1e:9e:52:
9e:c1:f5:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 15:48:39 2026 by rpki-client