
Manifest
$ rpki-client -vvvf rsync.rpki.tianhai.link/repo/TianhaiRpki/2/3E32DA3B9DC955F96CF1BF58C5748B7B80FCB798.mft
File: 3E32DA3B9DC955F96CF1BF58C5748B7B80FCB798.mft (raw, json)
Hash identifier: xlzyK1e/HXK/aOtyAqyhDMYAWfPwNi5tvOV4QTwOC+A=
Subject key identifier: 0F:16:13:7B:50:D8:F6:14:6F:F4:21:23:55:EE:E5:C3:4C:A4:2E:92
Authority key identifier: 3E:32:DA:3B:9D:C9:55:F9:6C:F1:BF:58:C5:74:8B:7B:80:FC:B7:98
Certificate issuer: /CN=3e32da3b9dc955f96cf1bf58c5748b7b80fcb798
Certificate serial: 42903307D18FDE518300465E3966D9560C3F699C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PjLaO53JVfls8b9YxXSLe4D8t5g.cer
Subject info access: rsync://rsync.rpki.tianhai.link/repo/TianhaiRpki/2/3E32DA3B9DC955F96CF1BF58C5748B7B80FCB798.mft
Manifest number: 0369
Signing time: Wed 16 Sep 2026 05:45:27 +0000
Manifest this update: Wed 16 Sep 2026 05:40:27 +0000
Manifest next update: Thu 17 Sep 2026 06:05:27 +0000
Files and hashes: 1: 3E32DA3B9DC955F96CF1BF58C5748B7B80FCB798.crl (hash: ssTlt13EvCSorYAJLa5+S4MOnUADkIvAK+vsVAKCQvU=)
Validation: OK
Signature path: rsync://rsync.rpki.tianhai.link/repo/TianhaiRpki/2/3E32DA3B9DC955F96CF1BF58C5748B7B80FCB798.crl
rsync://rsync.rpki.tianhai.link/repo/TianhaiRpki/2/3E32DA3B9DC955F96CF1BF58C5748B7B80FCB798.mft
rsync://rpki.ripe.net/repository/DEFAULT/PjLaO53JVfls8b9YxXSLe4D8t5g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 17 Sep 2026 06:05:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
42:90:33:07:d1:8f:de:51:83:00:46:5e:39:66:d9:56:0c:3f:69:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e32da3b9dc955f96cf1bf58c5748b7b80fcb798
Validity
Not Before: Sep 16 05:40:27 2026 GMT
Not After : Sep 17 06:05:27 2026 GMT
Subject: CN=0F16137B50D8F6146FF4212355EEE5C34CA42E92
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:07:70:3a:22:53:3d:ee:85:f0:93:0c:1c:70:
9b:16:6e:a8:68:44:45:66:71:7b:6e:80:d5:0c:24:
46:d2:9e:7c:90:0c:ea:d9:c6:d0:de:1e:35:1d:59:
a3:a1:71:da:ca:a6:10:12:13:37:70:c4:a0:7f:cf:
f5:0a:14:67:d1:86:b4:3e:f9:10:ce:50:2a:4b:95:
20:fc:60:f6:e1:bd:3d:a6:2f:5f:cb:10:16:ce:50:
02:4f:74:c7:d4:64:9f:30:10:6c:44:11:b9:1f:75:
ed:dd:bb:a2:fb:05:70:47:34:62:a4:56:e2:e0:5e:
8d:e3:11:b1:87:d4:79:75:e9:92:9c:bd:3b:6f:d3:
b4:0d:c8:a0:23:88:63:1d:99:7d:dd:ba:1e:2f:b3:
5a:f5:3c:38:e5:32:a1:09:21:e4:77:a4:12:9e:ef:
cb:53:b2:29:20:19:70:90:78:6b:0a:34:ad:06:5a:
a9:95:38:4e:80:6e:28:f9:f0:6e:e6:ba:7b:e8:70:
22:89:5d:a6:34:81:3d:cd:66:da:e3:29:19:eb:88:
dd:ab:70:9f:27:bc:18:0f:36:8d:37:97:2c:71:7c:
52:a2:f4:8d:07:99:fc:f0:c2:d5:fb:78:43:9a:5f:
1c:e7:8a:b8:06:9e:9c:73:be:58:f5:c9:f9:91:2b:
c8:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:16:13:7B:50:D8:F6:14:6F:F4:21:23:55:EE:E5:C3:4C:A4:2E:92
X509v3 Authority Key Identifier:
keyid:3E:32:DA:3B:9D:C9:55:F9:6C:F1:BF:58:C5:74:8B:7B:80:FC:B7:98
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.rpki.tianhai.link/repo/TianhaiRpki/2/3E32DA3B9DC955F96CF1BF58C5748B7B80FCB798.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PjLaO53JVfls8b9YxXSLe4D8t5g.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.rpki.tianhai.link/repo/TianhaiRpki/2/3E32DA3B9DC955F96CF1BF58C5748B7B80FCB798.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
95:49:b7:a6:9e:d9:47:cc:e0:10:c2:ed:3b:38:e3:06:a8:a6:
3c:b4:6d:7c:e4:e8:50:52:f7:4b:51:4a:07:38:06:10:3f:70:
65:c0:ef:bf:63:59:c8:73:c6:2f:8a:6b:1f:d5:20:37:16:e2:
3c:c4:e1:18:0f:38:bf:d8:77:57:50:29:08:03:5a:c0:d9:d3:
d1:69:ff:ac:fb:b9:80:da:f6:ba:ac:d5:32:f2:5e:2e:da:fe:
98:ae:20:ff:ab:52:fb:71:5f:a6:c2:e1:58:bf:b6:bf:fc:ea:
53:9a:05:43:11:83:a6:8a:9f:b8:ed:52:43:5b:b6:af:de:35:
76:9f:14:5e:b3:92:fb:d1:9e:fc:de:a3:ef:ba:62:0e:21:fb:
84:b4:65:3c:02:fc:3e:76:70:4c:a2:05:4c:35:c7:66:85:5d:
1c:50:cc:73:12:3f:d3:e1:2a:14:db:b8:4b:38:59:65:13:f6:
a6:c1:bf:77:f7:cd:d6:98:7e:c1:2d:9c:f0:1b:fb:ab:ed:9a:
0b:79:d4:24:4b:44:6d:93:83:3d:bf:9a:2f:a9:44:d3:61:a1:
bf:f5:9d:d3:20:6a:0b:fc:02:15:4f:36:92:c0:c5:c1:e0:59:
13:be:94:88:cc:52:fd:dd:55:e7:48:3c:cc:78:33:84:c5:d2:
91:3b:82:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 16 08:47:48 2026 by rpki-client