Manifest
$ rpki-client -vvf rsync.krill.clnexus.dev/repo/CLNexus/0/3DB14C691888B4AD8A6F00F3305184FA3C64833F.mft
File: 3DB14C691888B4AD8A6F00F3305184FA3C64833F.mft (raw, json)
Hash identifier: kyiN9+I+2nJ7g/e4+zlsC9+wDJIybf0OW7gcQY77JuA=
Subject key identifier: 0E:BA:79:E7:64:B4:67:16:E0:DE:90:BB:A6:FD:00:B0:2D:6C:1D:FA
Authority key identifier: 3D:B1:4C:69:18:88:B4:AD:8A:6F:00:F3:30:51:84:FA:3C:64:83:3F
Certificate issuer: /CN=3db14c691888b4ad8a6f00f3305184fa3c64833f
Certificate serial: 6EF855BB7C290D8C3AF728CFB2799AE65B0D26A4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PbFMaRiItK2KbwDzMFGE-jxkgz8.cer
Subject info access: rsync://rsync.krill.clnexus.dev/repo/CLNexus/0/3DB14C691888B4AD8A6F00F3305184FA3C64833F.mft
Manifest number: 25
Signing time: Tue 28 Jul 2026 05:26:59 +0000
Manifest this update: Tue 28 Jul 2026 05:21:59 +0000
Manifest next update: Wed 29 Jul 2026 07:08:59 +0000
Files and hashes: 1: AS214420.asa (hash: C65jtOjBlpPjRzqYy4fJANSK9FHM6Yz6hs95qtJ1op4=)
2: 3DB14C691888B4AD8A6F00F3305184FA3C64833F.crl (hash: 8xCR+5K3DsAiWpqYd4DBRMh4UJcaIUwVcwyNc4rdfAc=)
Validation: OK
Signature path: rsync://rsync.krill.clnexus.dev/repo/CLNexus/0/3DB14C691888B4AD8A6F00F3305184FA3C64833F.crl
rsync://rsync.krill.clnexus.dev/repo/CLNexus/0/3DB14C691888B4AD8A6F00F3305184FA3C64833F.mft
rsync://rpki.ripe.net/repository/DEFAULT/PbFMaRiItK2KbwDzMFGE-jxkgz8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 07:08:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6e:f8:55:bb:7c:29:0d:8c:3a:f7:28:cf:b2:79:9a:e6:5b:0d:26:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3db14c691888b4ad8a6f00f3305184fa3c64833f
Validity
Not Before: Jul 28 05:21:59 2026 GMT
Not After : Jul 29 07:08:59 2026 GMT
Subject: CN=0EBA79E764B46716E0DE90BBA6FD00B02D6C1DFA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:46:a2:9d:0e:cd:3e:b9:2d:3f:81:d9:7b:0a:
01:29:27:fc:43:8e:28:0b:43:7c:d4:2a:d8:28:a1:
f1:7b:cf:04:f9:5e:71:a9:eb:8d:e6:a0:eb:77:46:
44:35:c4:ea:cd:36:c3:6b:4a:1a:a4:fa:5e:db:64:
e2:0d:fe:88:ca:7b:10:9c:e1:df:e3:aa:9e:ee:6d:
79:17:99:88:4a:57:5d:c7:f2:b8:04:aa:9e:87:02:
af:ec:40:ab:be:47:80:39:e2:b6:5b:c9:8d:90:49:
54:ea:ad:2c:9a:ad:13:54:fb:de:c0:bf:5d:5a:97:
1d:dc:74:ce:a1:92:5e:80:06:83:29:99:1c:7e:f8:
68:69:ae:7d:85:74:d3:5d:2e:cf:2a:de:b0:c9:7f:
bb:66:ce:bc:4d:cb:b1:cd:b0:31:0e:af:0a:d7:72:
61:e9:1a:25:d7:45:6e:6f:72:89:1b:95:6a:a7:6e:
f4:f7:85:fb:e4:12:15:a0:8f:48:c8:6f:60:d6:3a:
c0:ce:bb:8c:4a:e5:38:4d:3d:db:32:53:fd:15:b6:
dc:6e:7a:aa:fd:e4:c8:79:4f:ce:3e:89:75:d8:43:
68:5a:bd:fb:26:54:c9:34:e0:86:40:54:3e:9d:bf:
65:22:79:09:17:00:09:84:21:76:e2:b6:d5:dc:35:
57:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:BA:79:E7:64:B4:67:16:E0:DE:90:BB:A6:FD:00:B0:2D:6C:1D:FA
X509v3 Authority Key Identifier:
keyid:3D:B1:4C:69:18:88:B4:AD:8A:6F:00:F3:30:51:84:FA:3C:64:83:3F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.krill.clnexus.dev/repo/CLNexus/0/3DB14C691888B4AD8A6F00F3305184FA3C64833F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PbFMaRiItK2KbwDzMFGE-jxkgz8.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.krill.clnexus.dev/repo/CLNexus/0/3DB14C691888B4AD8A6F00F3305184FA3C64833F.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:77:fa:ae:66:ee:2a:d4:2c:cf:ef:45:76:2d:f7:24:b3:4e:
48:93:e3:fd:3b:58:1b:14:c4:db:45:47:23:6a:d1:57:66:d1:
7c:79:01:2f:db:8f:09:7f:5a:ad:9a:1d:42:9c:d1:da:58:51:
a4:0c:f8:26:18:bd:84:13:52:82:c7:e3:09:94:d1:41:9d:8b:
f8:36:0f:ec:e1:61:f3:47:87:d7:9c:bc:dd:e3:74:a4:2d:58:
3a:1b:b7:1e:e2:70:57:c1:d2:1d:dc:d8:df:bb:4c:56:1b:be:
49:71:91:cb:13:d4:59:27:ed:8f:0f:13:c1:fe:98:d0:8d:cf:
9a:83:8e:f5:c6:65:1f:89:00:c0:c8:ec:c9:03:70:7a:96:8a:
89:5c:a3:12:cc:0d:58:30:84:97:9d:bf:88:6f:54:71:74:ba:
b2:4d:30:a1:10:f5:5e:28:90:71:c4:be:81:62:59:a9:cd:c5:
48:d0:ab:78:b1:19:c6:76:fe:a8:61:cf:c5:1d:0d:0a:cd:0e:
6c:e4:db:a9:4b:9f:6d:e5:6b:83:e5:e8:f8:8b:a7:e6:96:8f:
f7:2d:89:27:27:8d:51:73:51:fc:9f:d3:f5:cf:52:de:59:6c:
81:f3:81:5f:6b:5a:eb:1c:79:f2:53:3b:11:97:04:16:49:7c:
bb:46:ff:d2
-----BEGIN CERTIFICATE-----
MIIE6zCCA9OgAwIBAgIUbvhVu3wpDYw69yjPsnma5lsNJqQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoM2RiMTRjNjkxODg4YjRhZDhhNmYwMGYzMzA1MTg0ZmEz
YzY0ODMzZjAeFw0yNjA3MjgwNTIxNTlaFw0yNjA3MjkwNzA4NTlaMDMxMTAvBgNV
BAMTKDBFQkE3OUU3NjRCNDY3MTZFMERFOTBCQkE2RkQwMEIwMkQ2QzFERkEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDHRqKdDs0+uS0/gdl7CgEpJ/xD
jigLQ3zUKtgoofF7zwT5XnGp643moOt3RkQ1xOrNNsNrShqk+l7bZOIN/ojKexCc
4d/jqp7ubXkXmYhKV13H8rgEqp6HAq/sQKu+R4A54rZbyY2QSVTqrSyarRNU+97A
v11alx3cdM6hkl6ABoMpmRx++Ghprn2FdNNdLs8q3rDJf7tmzrxNy7HNsDEOrwrX
cmHpGiXXRW5vcokblWqnbvT3hfvkEhWgj0jIb2DWOsDOu4xK5ThNPdsyU/0Vttxu
eqr95Mh5T84+iXXYQ2havfsmVMk04IZAVD6dv2UieQkXAAmEIXbittXcNVdZAgMB
AAGjggH1MIIB8TAdBgNVHQ4EFgQUDrp552S0Zxbg3pC7pv0AsC1sHfowHwYDVR0j
BBgwFoAUPbFMaRiItK2KbwDzMFGE+jxkgz8wDgYDVR0PAQH/BAQDAgeAMGwGA1Ud
HwRlMGMwYaBfoF2GW3JzeW5jOi8vcnN5bmMua3JpbGwuY2xuZXh1cy5kZXYvcmVw
by9DTE5leHVzLzAvM0RCMTRDNjkxODg4QjRBRDhBNkYwMEYzMzA1MTg0RkEzQzY0
ODMzRi5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jw
a2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1BiRk1hUmlJdEsyS2J3RHpN
RkdFLWp4a2d6OC5jZXIwdwYIKwYBBQUHAQsEazBpMGcGCCsGAQUFBzALhltyc3lu
YzovL3JzeW5jLmtyaWxsLmNsbmV4dXMuZGV2L3JlcG8vQ0xOZXh1cy8wLzNEQjE0
QzY5MTg4OEI0QUQ4QTZGMDBGMzMwNTE4NEZBM0M2NDgzM0YubWZ0MBgGA1UdIAEB
/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQC
AAIFADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBs
d/quZu4q1CzP70V2Lfcks05Ik+P9O1gbFMTbRUcjatFXZtF8eQEv248Jf1qtmh1C
nNHaWFGkDPgmGL2EE1KCx+MJlNFBnYv4Ng/s4WHzR4fXnLzd43SkLVg6G7ce4nBX
wdId3Njfu0xWG75JcZHLE9RZJ+2PDxPB/pjQjc+ag471xmUfiQDAyOzJA3B6loqJ
XKMSzA1YMISXnb+Ib1RxdLqyTTChEPVeKJBxxL6BYlmpzcVI0Kt4sRnGdv6oYc/F
HQ0KzQ5s5NupS59t5WuD5ej4i6fmlo/3LYknJ41Rc1H8n9P1z1LeWWyB84Ffa1rr
HHnyUzsRlwQWSXy7Rv/S
-----END CERTIFICATE-----
Generated at Tue Jul 28 16:38:52 2026 by rpki-client