Manifest
$ rpki-client -vvvf rsync.krill.clnexus.dev/repo/CLNexus/0/3DB14C691888B4AD8A6F00F3305184FA3C64833F.mft
File: 3DB14C691888B4AD8A6F00F3305184FA3C64833F.mft (raw, json)
Hash identifier: +hl7d1BMCRTl62ZlYqWnU1srvg6oo+Bj+tbUEdfsAnA=
Subject key identifier: 56:41:56:7E:44:D6:51:3F:EE:9F:AC:FF:91:78:3C:36:EB:5B:46:E1
Authority key identifier: 3D:B1:4C:69:18:88:B4:AD:8A:6F:00:F3:30:51:84:FA:3C:64:83:3F
Certificate issuer: /CN=3db14c691888b4ad8a6f00f3305184fa3c64833f
Certificate serial: 24655E43FF55EC95CF9768B46070D5F178D27ABF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PbFMaRiItK2KbwDzMFGE-jxkgz8.cer
Subject info access: rsync://rsync.krill.clnexus.dev/repo/CLNexus/0/3DB14C691888B4AD8A6F00F3305184FA3C64833F.mft
Manifest number: 97
Signing time: Thu 22 Oct 2026 21:09:46 +0000
Manifest this update: Thu 22 Oct 2026 21:04:46 +0000
Manifest next update: Fri 23 Oct 2026 21:33:46 +0000
Files and hashes: 1: 3DB14C691888B4AD8A6F00F3305184FA3C64833F.crl (hash: /1LpGozWrv3je3Oxj9Ur63U0MigdgVtyYp2s/6wDyWw=)
2: AS214420.asa (hash: C65jtOjBlpPjRzqYy4fJANSK9FHM6Yz6hs95qtJ1op4=)
Validation: OK
Signature path: rsync://rsync.krill.clnexus.dev/repo/CLNexus/0/3DB14C691888B4AD8A6F00F3305184FA3C64833F.crl
rsync://rsync.krill.clnexus.dev/repo/CLNexus/0/3DB14C691888B4AD8A6F00F3305184FA3C64833F.mft
rsync://rpki.ripe.net/repository/DEFAULT/PbFMaRiItK2KbwDzMFGE-jxkgz8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 23 Oct 2026 21:33:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
24:65:5e:43:ff:55:ec:95:cf:97:68:b4:60:70:d5:f1:78:d2:7a:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3db14c691888b4ad8a6f00f3305184fa3c64833f
Validity
Not Before: Oct 22 21:04:46 2026 GMT
Not After : Oct 23 21:33:46 2026 GMT
Subject: CN=5641567E44D6513FEE9FACFF91783C36EB5B46E1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:c1:0e:67:b4:69:b6:e2:de:41:34:fd:f2:bd:
fb:fb:b2:64:4c:04:0f:fc:b3:3e:35:9d:64:19:6d:
ea:58:7b:ad:e8:a6:93:37:8d:44:2e:b7:8c:49:78:
00:e5:1b:b8:25:5d:6a:9a:a6:1d:e1:d9:82:9f:cb:
90:79:cb:e9:51:3a:f9:1c:d6:5c:39:f5:91:7d:f2:
32:21:5c:d1:35:38:54:42:cb:34:70:e8:b3:b3:09:
e1:37:28:cc:d6:2f:de:4a:96:06:e1:c0:91:97:2f:
c8:16:b0:2b:25:1c:94:46:c4:73:a6:44:d3:18:7d:
71:9f:32:37:94:09:6e:1b:2e:42:9b:13:4c:50:9e:
e5:36:0c:95:0c:23:53:aa:a5:60:e7:f2:21:21:21:
ca:fc:72:29:cf:be:62:2e:0a:dc:f8:28:66:9f:c0:
0c:b7:f1:48:80:8a:d5:b7:75:fe:42:41:77:b1:a4:
f5:7d:20:85:dc:1f:3b:5f:d7:8a:0d:b5:c6:da:30:
37:e5:3b:33:83:17:d4:a2:c0:59:5d:84:39:43:4f:
d4:56:01:19:7e:52:b7:de:c8:2b:e0:d2:92:2c:c2:
5e:dd:76:be:78:6a:81:9f:2a:de:27:ab:9b:34:6b:
8d:79:24:1b:19:03:58:dc:c8:fc:d3:a9:34:61:da:
5d:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:41:56:7E:44:D6:51:3F:EE:9F:AC:FF:91:78:3C:36:EB:5B:46:E1
X509v3 Authority Key Identifier:
keyid:3D:B1:4C:69:18:88:B4:AD:8A:6F:00:F3:30:51:84:FA:3C:64:83:3F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.krill.clnexus.dev/repo/CLNexus/0/3DB14C691888B4AD8A6F00F3305184FA3C64833F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PbFMaRiItK2KbwDzMFGE-jxkgz8.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.krill.clnexus.dev/repo/CLNexus/0/3DB14C691888B4AD8A6F00F3305184FA3C64833F.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:5f:61:f9:2b:f0:88:35:a0:51:3b:23:b3:51:56:f8:11:06:
02:f5:f7:b3:d5:ac:e6:f5:a8:df:b7:04:ea:a9:b8:54:a7:12:
35:a4:b3:07:a9:1f:c8:7c:bf:2e:1d:61:1e:60:2f:e4:80:49:
b8:d0:07:34:2c:2a:6f:e2:de:8b:df:7f:fe:e2:51:6a:0b:a2:
0f:dc:f3:f4:3e:07:2c:84:86:5b:40:66:1a:27:b3:30:07:db:
6b:47:0b:fc:d4:90:24:a7:81:89:d6:e6:40:bf:14:d1:31:27:
00:57:17:72:88:aa:87:d8:a1:4b:9c:62:5f:75:bc:59:4d:62:
bb:38:98:65:1e:26:c8:f9:7c:8a:95:57:76:68:0e:72:17:c4:
b7:56:3e:05:51:1e:6c:a4:c2:7b:ac:0c:fc:7a:9a:72:0f:03:
57:56:34:8a:2a:12:e5:a1:00:c1:80:49:8e:cd:5f:5c:fa:f7:
ef:b7:dd:cb:14:07:c5:6a:1a:1d:a1:50:f7:5b:b8:a4:f6:09:
3f:c0:cb:49:7b:ba:c9:e6:e1:a6:2d:fc:b8:0f:f8:fc:fc:29:
32:d2:74:e1:30:35:4d:fd:01:8d:b8:9a:55:03:57:c9:49:a8:
79:d3:88:25:9d:1e:a0:c4:1d:a7:e7:ed:dd:1a:47:e7:5e:b8:
2b:ed:34:77
-----BEGIN CERTIFICATE-----
MIIE6zCCA9OgAwIBAgIUJGVeQ/9V7JXPl2i0YHDV8XjSer8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoM2RiMTRjNjkxODg4YjRhZDhhNmYwMGYzMzA1MTg0ZmEz
YzY0ODMzZjAeFw0yNjEwMjIyMTA0NDZaFw0yNjEwMjMyMTMzNDZaMDMxMTAvBgNV
BAMTKDU2NDE1NjdFNDRENjUxM0ZFRTlGQUNGRjkxNzgzQzM2RUI1QjQ2RTEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDNwQ5ntGm24t5BNP3yvfv7smRM
BA/8sz41nWQZbepYe63oppM3jUQut4xJeADlG7glXWqaph3h2YKfy5B5y+lROvkc
1lw59ZF98jIhXNE1OFRCyzRw6LOzCeE3KMzWL95KlgbhwJGXL8gWsCslHJRGxHOm
RNMYfXGfMjeUCW4bLkKbE0xQnuU2DJUMI1OqpWDn8iEhIcr8cinPvmIuCtz4KGaf
wAy38UiAitW3df5CQXexpPV9IIXcHztf14oNtcbaMDflOzODF9SiwFldhDlDT9RW
ARl+UrfeyCvg0pIswl7ddr54aoGfKt4nq5s0a415JBsZA1jcyPzTqTRh2l1BAgMB
AAGjggH1MIIB8TAdBgNVHQ4EFgQUVkFWfkTWUT/un6z/kXg8NutbRuEwHwYDVR0j
BBgwFoAUPbFMaRiItK2KbwDzMFGE+jxkgz8wDgYDVR0PAQH/BAQDAgeAMGwGA1Ud
HwRlMGMwYaBfoF2GW3JzeW5jOi8vcnN5bmMua3JpbGwuY2xuZXh1cy5kZXYvcmVw
by9DTE5leHVzLzAvM0RCMTRDNjkxODg4QjRBRDhBNkYwMEYzMzA1MTg0RkEzQzY0
ODMzRi5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jw
a2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1BiRk1hUmlJdEsyS2J3RHpN
RkdFLWp4a2d6OC5jZXIwdwYIKwYBBQUHAQsEazBpMGcGCCsGAQUFBzALhltyc3lu
YzovL3JzeW5jLmtyaWxsLmNsbmV4dXMuZGV2L3JlcG8vQ0xOZXh1cy8wLzNEQjE0
QzY5MTg4OEI0QUQ4QTZGMDBGMzMwNTE4NEZBM0M2NDgzM0YubWZ0MBgGA1UdIAEB
/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQC
AAIFADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBV
X2H5K/CINaBROyOzUVb4EQYC9fez1azm9ajftwTqqbhUpxI1pLMHqR/IfL8uHWEe
YC/kgEm40Ac0LCpv4t6L33/+4lFqC6IP3PP0PgcshIZbQGYaJ7MwB9trRwv81JAk
p4GJ1uZAvxTRMScAVxdyiKqH2KFLnGJfdbxZTWK7OJhlHibI+XyKlVd2aA5yF8S3
Vj4FUR5spMJ7rAz8eppyDwNXVjSKKhLloQDBgEmOzV9c+vfvt93LFAfFahodoVD3
W7ik9gk/wMtJe7rJ5uGmLfy4D/j8/Cky0nThMDVN/QGNuJpVA1fJSah504glnR6g
xB2n5+3dGkfnXrgr7TR3
-----END CERTIFICATE-----
Generated at Fri Oct 23 07:13:56 2026 by rpki-client