Manifest
$ rpki-client -vvf rsync.rpki.tianhai.link/repo/TianhaiRpki/2/3E32DA3B9DC955F96CF1BF58C5748B7B80FCB798.mft
File: 3E32DA3B9DC955F96CF1BF58C5748B7B80FCB798.mft (raw, json)
Hash identifier: BlJTfNNviEyFXiVvi2KWaMzo+aPMxJ9u1GZc+yU2594=
Subject key identifier: 64:9E:81:C4:8D:43:E0:62:B0:64:49:DF:2D:24:8D:27:B2:C5:17:E1
Authority key identifier: 3E:32:DA:3B:9D:C9:55:F9:6C:F1:BF:58:C5:74:8B:7B:80:FC:B7:98
Certificate issuer: /CN=3e32da3b9dc955f96cf1bf58c5748b7b80fcb798
Certificate serial: 42B5BAB3C76343457C740C69E7E35AC6741C9ACC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PjLaO53JVfls8b9YxXSLe4D8t5g.cer
Subject info access: rsync://rsync.rpki.tianhai.link/repo/TianhaiRpki/2/3E32DA3B9DC955F96CF1BF58C5748B7B80FCB798.mft
Manifest number: 029E
Signing time: Thu 16 Apr 2026 18:29:13 +0000
Manifest this update: Thu 16 Apr 2026 18:24:13 +0000
Manifest next update: Fri 17 Apr 2026 20:50:13 +0000
Files and hashes: 1: 3E32DA3B9DC955F96CF1BF58C5748B7B80FCB798.crl (hash: o65niSe2tGKewg4+fgZGMLUJAhsCyN/7TSyuvOvnf6U=)
Validation: OK
Signature path: rsync://rsync.rpki.tianhai.link/repo/TianhaiRpki/2/3E32DA3B9DC955F96CF1BF58C5748B7B80FCB798.crl
rsync://rsync.rpki.tianhai.link/repo/TianhaiRpki/2/3E32DA3B9DC955F96CF1BF58C5748B7B80FCB798.mft
rsync://rpki.ripe.net/repository/DEFAULT/PjLaO53JVfls8b9YxXSLe4D8t5g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 20:50:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
42:b5:ba:b3:c7:63:43:45:7c:74:0c:69:e7:e3:5a:c6:74:1c:9a:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e32da3b9dc955f96cf1bf58c5748b7b80fcb798
Validity
Not Before: Apr 16 18:24:13 2026 GMT
Not After : Apr 17 20:50:13 2026 GMT
Subject: CN=649E81C48D43E062B06449DF2D248D27B2C517E1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:53:1f:44:4b:5b:3b:69:1b:5b:5a:09:4a:24:
21:2d:c3:31:30:6b:ee:8c:84:cc:5c:d6:3a:70:8f:
b9:aa:7b:89:92:69:1c:e8:77:dd:07:bd:c8:1c:23:
84:d6:2c:66:f0:93:6a:32:f4:2d:f0:8b:32:fc:8b:
d4:0f:2a:5c:f9:81:67:83:06:13:85:f2:10:08:4f:
75:f2:7c:f7:84:01:bc:67:2e:64:3a:50:c7:7d:1b:
d2:4f:ee:92:71:9e:b6:82:75:ed:36:db:8d:97:28:
91:0f:d2:64:d9:df:98:94:05:25:d1:36:79:62:2e:
b4:5f:07:b9:91:21:67:36:56:7b:0b:2d:b8:aa:1a:
f5:0b:4f:c2:96:42:88:2b:c4:f3:12:18:7d:4a:ef:
1e:1f:fc:91:c6:c5:ce:70:a9:28:30:16:c9:05:b0:
38:4f:8f:42:bb:ca:17:4b:09:b4:01:5d:d4:58:b8:
f8:0e:c1:04:e8:f7:25:fa:bf:e6:18:f7:04:6d:0e:
17:06:f2:55:de:ff:e9:9f:61:4c:52:fe:63:16:0b:
69:f5:a6:95:81:d9:c3:ec:96:45:5f:cc:b2:1a:28:
6a:65:9b:41:37:56:9e:90:15:ef:3e:aa:20:ac:17:
53:8c:01:74:c5:9a:dc:2b:36:f7:20:98:b4:cc:93:
ac:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:9E:81:C4:8D:43:E0:62:B0:64:49:DF:2D:24:8D:27:B2:C5:17:E1
X509v3 Authority Key Identifier:
keyid:3E:32:DA:3B:9D:C9:55:F9:6C:F1:BF:58:C5:74:8B:7B:80:FC:B7:98
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.rpki.tianhai.link/repo/TianhaiRpki/2/3E32DA3B9DC955F96CF1BF58C5748B7B80FCB798.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PjLaO53JVfls8b9YxXSLe4D8t5g.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.rpki.tianhai.link/repo/TianhaiRpki/2/3E32DA3B9DC955F96CF1BF58C5748B7B80FCB798.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:d5:7b:c9:b9:a2:b2:9b:35:fd:2f:9e:3f:9b:ba:98:cc:b2:
8d:d3:6f:b1:35:8a:17:46:5a:be:4d:62:41:74:92:d1:7f:32:
74:96:e8:38:2c:97:09:20:58:85:98:61:6f:61:fd:1a:a9:31:
97:37:a9:54:9c:22:03:6d:53:f3:de:ed:a9:a7:46:67:71:f2:
b5:02:f3:7a:8a:f8:82:94:18:0a:76:0d:ed:f6:82:84:53:ce:
65:20:f6:45:61:5e:42:6a:78:9e:b2:51:18:34:bc:7f:a3:fa:
2f:91:9a:17:fe:b0:53:87:2a:23:32:e1:a4:f7:08:52:e4:9b:
dd:bf:21:c2:29:fa:2b:96:c1:43:a9:24:01:ba:b4:84:f2:e4:
e3:5c:87:50:83:67:e8:01:c9:4d:0a:80:a5:17:37:4b:98:cf:
55:21:e5:f3:80:8b:64:97:3b:07:3a:73:49:d0:69:de:ff:b8:
ae:d1:3d:a5:83:a7:1c:b1:7a:16:6c:06:0c:4e:a8:d8:e8:14:
d3:21:9c:07:8d:ac:4e:c2:64:c0:6f:65:62:ae:d7:37:88:14:
b3:c9:6f:fe:c2:97:46:b6:91:2c:5f:ca:88:af:36:ed:b0:25:
05:da:b7:fb:21:7b:a3:37:ac:1d:69:5d:d6:01:3e:84:01:52:
f8:b2:23:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 05:04:02 2026 by rpki-client