Manifest
$ rpki-client -vvvf rsync.krill.clnexus.dev/repo/CLNexus/0/3DB14C691888B4AD8A6F00F3305184FA3C64833F.mft
File: 3DB14C691888B4AD8A6F00F3305184FA3C64833F.mft (raw, json)
Hash identifier: A7flI0iw8uoa89Bv1wQ0X+Fll1lFMYKZhqhNyJIedjk=
Subject key identifier: C5:E9:44:D1:66:17:42:A3:43:9F:6B:1C:62:C6:C1:ED:6B:35:B2:44
Authority key identifier: 3D:B1:4C:69:18:88:B4:AD:8A:6F:00:F3:30:51:84:FA:3C:64:83:3F
Certificate issuer: /CN=3db14c691888b4ad8a6f00f3305184fa3c64833f
Certificate serial: 51D19D282F1CF82419D7191CC3AE509A9F0AA947
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PbFMaRiItK2KbwDzMFGE-jxkgz8.cer
Subject info access: rsync://rsync.krill.clnexus.dev/repo/CLNexus/0/3DB14C691888B4AD8A6F00F3305184FA3C64833F.mft
Manifest number: 6F
Signing time: Tue 22 Sep 2026 11:14:40 +0000
Manifest this update: Tue 22 Sep 2026 11:09:40 +0000
Manifest next update: Wed 23 Sep 2026 14:20:40 +0000
Files and hashes: 1: 3DB14C691888B4AD8A6F00F3305184FA3C64833F.crl (hash: eLa0fNo4qwTMi55AOHY/i2TcDol0xt7d5AlTx9srOMw=)
2: AS214420.asa (hash: C65jtOjBlpPjRzqYy4fJANSK9FHM6Yz6hs95qtJ1op4=)
Validation: OK
Signature path: rsync://rsync.krill.clnexus.dev/repo/CLNexus/0/3DB14C691888B4AD8A6F00F3305184FA3C64833F.crl
rsync://rsync.krill.clnexus.dev/repo/CLNexus/0/3DB14C691888B4AD8A6F00F3305184FA3C64833F.mft
rsync://rpki.ripe.net/repository/DEFAULT/PbFMaRiItK2KbwDzMFGE-jxkgz8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 14:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
51:d1:9d:28:2f:1c:f8:24:19:d7:19:1c:c3:ae:50:9a:9f:0a:a9:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3db14c691888b4ad8a6f00f3305184fa3c64833f
Validity
Not Before: Sep 22 11:09:40 2026 GMT
Not After : Sep 23 14:20:40 2026 GMT
Subject: CN=C5E944D1661742A3439F6B1C62C6C1ED6B35B244
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:aa:99:60:5c:3f:27:cb:3a:dc:4c:59:b5:a7:
2e:c4:1d:a7:60:00:c7:88:00:82:fa:4b:10:96:56:
b5:0e:de:1f:27:35:5e:3d:b1:b5:dd:83:9a:14:93:
58:dd:51:2d:04:cf:54:ff:d0:e6:63:3e:0f:7f:5b:
93:c9:12:46:3a:1a:8f:ce:d6:f0:73:ae:ee:70:c8:
40:cd:db:6d:d9:90:d0:e7:8c:db:99:06:8f:66:85:
a3:e0:55:f3:95:de:cb:9f:ab:01:e2:2b:6e:16:fb:
70:cc:55:ac:0d:21:ef:b9:88:9d:9c:6f:01:43:01:
a8:73:7e:d0:2c:e4:9d:05:a4:bc:ee:10:ca:d6:32:
be:85:a4:85:9d:67:89:d5:71:b2:cf:03:3e:1c:3e:
eb:63:f7:67:a2:1f:81:24:22:7f:df:d5:da:85:2c:
65:7b:f6:07:2c:93:fb:73:eb:5c:2b:16:3a:e5:1f:
80:34:5a:68:fa:77:d3:c3:2f:d6:3e:87:d9:ef:b9:
ae:f4:4c:f1:83:32:31:4e:26:4f:a4:a3:84:8e:c6:
86:15:fa:40:e8:99:b2:1b:57:f1:1a:96:6a:01:ad:
36:88:16:fd:59:81:7a:dc:5d:27:5d:67:b4:40:84:
d3:b2:97:50:93:17:6d:50:38:01:81:65:4d:bd:c1:
6c:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:E9:44:D1:66:17:42:A3:43:9F:6B:1C:62:C6:C1:ED:6B:35:B2:44
X509v3 Authority Key Identifier:
keyid:3D:B1:4C:69:18:88:B4:AD:8A:6F:00:F3:30:51:84:FA:3C:64:83:3F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.krill.clnexus.dev/repo/CLNexus/0/3DB14C691888B4AD8A6F00F3305184FA3C64833F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PbFMaRiItK2KbwDzMFGE-jxkgz8.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.krill.clnexus.dev/repo/CLNexus/0/3DB14C691888B4AD8A6F00F3305184FA3C64833F.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:d6:7a:d1:97:46:d3:7c:0b:9d:a0:fa:ba:cc:23:a3:9d:5c:
1e:40:26:22:b2:53:86:5d:4d:1a:32:72:11:8f:0a:4c:97:3f:
79:e8:ff:ce:f1:f2:0e:cd:4e:84:3c:0a:00:42:12:ec:e5:01:
69:6a:02:d8:0b:dd:4b:aa:69:0d:3d:ba:89:c9:52:8a:64:b0:
83:97:f0:57:2f:8c:d9:4d:9e:d2:bf:1f:5f:f1:97:98:e2:5a:
03:50:2b:52:40:15:dd:c6:9e:92:74:b4:24:5d:d7:03:4d:09:
b7:03:49:e0:70:2e:21:65:a1:45:bf:da:4d:f7:1f:75:ba:ef:
0f:3c:2d:18:33:de:1a:7c:72:54:c5:2a:0c:0a:2b:fe:6c:95:
9f:3b:e0:f9:d8:13:67:b1:b1:03:34:ae:d9:01:09:64:53:e6:
27:f6:67:c2:e8:87:fb:9f:93:ba:b7:ad:01:fc:dd:5f:7b:24:
2f:c4:43:e0:5e:75:68:1f:68:2d:96:b9:86:e2:aa:49:2a:15:
a7:0f:2c:f4:dd:6e:07:c2:97:72:e1:c3:f5:4e:cc:5f:d5:78:
8f:ac:4d:dd:fa:d0:de:49:5b:45:66:85:11:e9:a6:f9:23:0f:
ce:b8:8b:d5:f5:b4:8d:05:72:71:13:f3:59:51:34:5c:1c:54:
24:d7:0a:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 19:25:48 2026 by rpki-client