Manifest
$ rpki-client -vvvf rsync.krill.clnexus.dev/repo/CLNexus/0/3DB14C691888B4AD8A6F00F3305184FA3C64833F.mft
File: 3DB14C691888B4AD8A6F00F3305184FA3C64833F.mft (raw, json)
Hash identifier: 64Mi3njzaNj+qHDKk4eCkau9Jvc6P+ZGM5vAKe00Ulc=
Subject key identifier: A6:5C:E0:42:53:B1:52:FE:B4:CE:78:FB:7A:8C:93:3A:30:40:9F:03
Authority key identifier: 3D:B1:4C:69:18:88:B4:AD:8A:6F:00:F3:30:51:84:FA:3C:64:83:3F
Certificate issuer: /CN=3db14c691888b4ad8a6f00f3305184fa3c64833f
Certificate serial: 077155B3A085B66034AF24299C81F9E4E6157E71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PbFMaRiItK2KbwDzMFGE-jxkgz8.cer
Subject info access: rsync://rsync.krill.clnexus.dev/repo/CLNexus/0/3DB14C691888B4AD8A6F00F3305184FA3C64833F.mft
Manifest number: 96
Signing time: Thu 22 Oct 2026 02:14:44 +0000
Manifest this update: Thu 22 Oct 2026 02:09:44 +0000
Manifest next update: Fri 23 Oct 2026 05:08:44 +0000
Files and hashes: 1: 3DB14C691888B4AD8A6F00F3305184FA3C64833F.crl (hash: Zj08lsSfgqLnK7yE6fHWuLclQEQv2xQyoxm3wG1TFkc=)
2: AS214420.asa (hash: C65jtOjBlpPjRzqYy4fJANSK9FHM6Yz6hs95qtJ1op4=)
Validation: OK
Signature path: rsync://rsync.krill.clnexus.dev/repo/CLNexus/0/3DB14C691888B4AD8A6F00F3305184FA3C64833F.crl
rsync://rsync.krill.clnexus.dev/repo/CLNexus/0/3DB14C691888B4AD8A6F00F3305184FA3C64833F.mft
rsync://rpki.ripe.net/repository/DEFAULT/PbFMaRiItK2KbwDzMFGE-jxkgz8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 23 Oct 2026 05:08:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
07:71:55:b3:a0:85:b6:60:34:af:24:29:9c:81:f9:e4:e6:15:7e:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3db14c691888b4ad8a6f00f3305184fa3c64833f
Validity
Not Before: Oct 22 02:09:44 2026 GMT
Not After : Oct 23 05:08:44 2026 GMT
Subject: CN=A65CE04253B152FEB4CE78FB7A8C933A30409F03
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:ff:5c:49:90:3f:00:06:ef:9d:d2:82:f2:f5:
01:fb:fd:1f:07:d3:87:fa:b4:04:4c:1e:e1:fb:da:
c6:59:c7:0a:8e:8e:90:09:74:c8:10:a2:16:df:0c:
7a:53:93:27:f2:ed:9e:7f:fd:05:91:1d:c5:5c:c4:
b0:26:6f:15:21:13:67:b0:d6:80:94:49:c3:02:43:
e0:40:14:f3:f8:9f:4e:55:d1:ca:22:8f:8d:9f:9f:
dd:2f:70:df:4b:51:38:23:73:8d:de:fa:07:48:bc:
cb:f3:5a:b5:0e:23:f6:10:45:8c:41:b6:0f:79:ac:
81:05:63:b2:83:8e:90:32:a7:c9:fe:5c:8a:49:c4:
6b:1f:a9:1c:c8:84:d6:14:3f:96:3b:a0:a3:b7:ac:
a8:2b:dd:85:56:bb:0a:b5:7f:4f:43:96:47:d5:b5:
5d:51:bc:f9:33:6c:0c:ec:35:db:9a:1b:fe:f6:fe:
19:f1:3a:56:ca:a2:f1:68:8e:f0:e4:c5:05:e1:10:
aa:3d:1e:3c:e2:a0:81:55:9b:fe:4b:d4:32:b6:91:
86:64:48:c5:77:37:45:04:6f:38:34:c4:a4:10:be:
2d:37:b1:79:6f:5f:12:8f:df:40:92:14:b9:ad:ef:
b7:1f:2f:e8:26:31:67:eb:17:e4:3e:3d:4d:a7:8f:
8b:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:5C:E0:42:53:B1:52:FE:B4:CE:78:FB:7A:8C:93:3A:30:40:9F:03
X509v3 Authority Key Identifier:
keyid:3D:B1:4C:69:18:88:B4:AD:8A:6F:00:F3:30:51:84:FA:3C:64:83:3F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.krill.clnexus.dev/repo/CLNexus/0/3DB14C691888B4AD8A6F00F3305184FA3C64833F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PbFMaRiItK2KbwDzMFGE-jxkgz8.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.krill.clnexus.dev/repo/CLNexus/0/3DB14C691888B4AD8A6F00F3305184FA3C64833F.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:59:2c:df:0c:76:ab:dd:63:a0:b4:d5:40:3d:ca:0f:47:d2:
e7:04:61:07:ef:77:11:7f:c1:32:4b:d0:31:f6:f2:1e:80:22:
79:b8:20:2b:76:76:8e:73:8a:80:a8:1c:44:63:d6:73:5d:36:
1b:1b:16:79:85:e3:30:7a:d7:dd:06:23:1b:b8:33:25:6f:bb:
6f:53:96:fe:5e:d0:85:ca:0a:7f:68:85:5f:95:38:6f:83:5f:
c4:68:69:d2:0a:74:73:32:6a:68:26:85:e9:93:19:0c:c0:20:
2b:95:4b:01:31:a3:51:61:e1:11:df:71:7d:c9:8e:f1:71:1c:
63:cb:0c:66:c0:cd:d0:c1:06:14:ff:20:4c:81:7d:21:ce:2c:
e9:52:b2:4f:ef:cd:d0:e5:c5:74:24:ab:84:79:96:c0:a3:80:
32:9c:96:4a:a4:c1:88:d4:d7:3c:9c:86:7f:b8:c3:9c:94:c8:
c2:00:14:9d:6c:b7:4a:7f:5e:d6:93:14:b8:af:f6:bd:6f:3c:
8c:6a:58:46:8f:0a:7a:df:a3:b4:09:ad:74:93:46:24:31:90:
f1:c2:84:d9:3d:0c:14:63:26:b3:44:f1:6b:05:20:41:7e:4d:
8b:28:d5:2f:0d:2e:0e:e3:6d:c4:f2:02:b8:45:51:2e:64:6f:
27:65:c6:7e
-----BEGIN CERTIFICATE-----
MIIE6zCCA9OgAwIBAgIUB3FVs6CFtmA0ryQpnIH55OYVfnEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoM2RiMTRjNjkxODg4YjRhZDhhNmYwMGYzMzA1MTg0ZmEz
YzY0ODMzZjAeFw0yNjEwMjIwMjA5NDRaFw0yNjEwMjMwNTA4NDRaMDMxMTAvBgNV
BAMTKEE2NUNFMDQyNTNCMTUyRkVCNENFNzhGQjdBOEM5MzNBMzA0MDlGMDMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCb/1xJkD8ABu+d0oLy9QH7/R8H
04f6tARMHuH72sZZxwqOjpAJdMgQohbfDHpTkyfy7Z5//QWRHcVcxLAmbxUhE2ew
1oCUScMCQ+BAFPP4n05V0coij42fn90vcN9LUTgjc43e+gdIvMvzWrUOI/YQRYxB
tg95rIEFY7KDjpAyp8n+XIpJxGsfqRzIhNYUP5Y7oKO3rKgr3YVWuwq1f09DlkfV
tV1RvPkzbAzsNduaG/72/hnxOlbKovFojvDkxQXhEKo9HjzioIFVm/5L1DK2kYZk
SMV3N0UEbzg0xKQQvi03sXlvXxKP30CSFLmt77cfL+gmMWfrF+Q+PU2nj4s/AgMB
AAGjggH1MIIB8TAdBgNVHQ4EFgQUplzgQlOxUv60znj7eoyTOjBAnwMwHwYDVR0j
BBgwFoAUPbFMaRiItK2KbwDzMFGE+jxkgz8wDgYDVR0PAQH/BAQDAgeAMGwGA1Ud
HwRlMGMwYaBfoF2GW3JzeW5jOi8vcnN5bmMua3JpbGwuY2xuZXh1cy5kZXYvcmVw
by9DTE5leHVzLzAvM0RCMTRDNjkxODg4QjRBRDhBNkYwMEYzMzA1MTg0RkEzQzY0
ODMzRi5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jw
a2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1BiRk1hUmlJdEsyS2J3RHpN
RkdFLWp4a2d6OC5jZXIwdwYIKwYBBQUHAQsEazBpMGcGCCsGAQUFBzALhltyc3lu
YzovL3JzeW5jLmtyaWxsLmNsbmV4dXMuZGV2L3JlcG8vQ0xOZXh1cy8wLzNEQjE0
QzY5MTg4OEI0QUQ4QTZGMDBGMzMwNTE4NEZBM0M2NDgzM0YubWZ0MBgGA1UdIAEB
/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQC
AAIFADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQB4
WSzfDHar3WOgtNVAPcoPR9LnBGEH73cRf8EyS9Ax9vIegCJ5uCArdnaOc4qAqBxE
Y9ZzXTYbGxZ5heMwetfdBiMbuDMlb7tvU5b+XtCFygp/aIVflThvg1/EaGnSCnRz
MmpoJoXpkxkMwCArlUsBMaNRYeER33F9yY7xcRxjywxmwM3QwQYU/yBMgX0hzizp
UrJP783Q5cV0JKuEeZbAo4AynJZKpMGI1Nc8nIZ/uMOclMjCABSdbLdKf17WkxS4
r/a9bzyMalhGjwp636O0Ca10k0YkMZDxwoTZPQwUYyazRPFrBSBBfk2LKNUvDS4O
423E8gK4RVEuZG8nZcZ+
-----END CERTIFICATE-----
Generated at Thu Oct 22 20:39:00 2026 by rpki-client