Manifest
$ rpki-client -vvvf rsync.rpki.tianhai.link/repo/TianhaiRpki/2/3E32DA3B9DC955F96CF1BF58C5748B7B80FCB798.mft
File: 3E32DA3B9DC955F96CF1BF58C5748B7B80FCB798.mft (raw, json)
Hash identifier: OSu1PfkGzBLWMWtV7OljXy+t0hFbe4ikPW177c5lStU=
Subject key identifier: BE:BD:E0:6F:CE:6C:D8:B0:3E:66:07:49:05:04:77:5A:F4:C2:63:C2
Authority key identifier: 3E:32:DA:3B:9D:C9:55:F9:6C:F1:BF:58:C5:74:8B:7B:80:FC:B7:98
Certificate issuer: /CN=3e32da3b9dc955f96cf1bf58c5748b7b80fcb798
Certificate serial: 1F1E1CBAD3B930F9787787D4888DD4DB97D69919
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PjLaO53JVfls8b9YxXSLe4D8t5g.cer
Subject info access: rsync://rsync.rpki.tianhai.link/repo/TianhaiRpki/2/3E32DA3B9DC955F96CF1BF58C5748B7B80FCB798.mft
Manifest number: 03A8
Signing time: Sat 31 Oct 2026 19:38:11 +0000
Manifest this update: Sat 31 Oct 2026 19:33:11 +0000
Manifest next update: Sun 01 Nov 2026 22:15:11 +0000
Files and hashes: 1: 3E32DA3B9DC955F96CF1BF58C5748B7B80FCB798.crl (hash: KiwhDI4FHmOoWTKlTQg8E5j5B/6PUHRjsgnxzJinbv4=)
Validation: OK
Signature path: rsync://rsync.rpki.tianhai.link/repo/TianhaiRpki/2/3E32DA3B9DC955F96CF1BF58C5748B7B80FCB798.crl
rsync://rsync.rpki.tianhai.link/repo/TianhaiRpki/2/3E32DA3B9DC955F96CF1BF58C5748B7B80FCB798.mft
rsync://rpki.ripe.net/repository/DEFAULT/PjLaO53JVfls8b9YxXSLe4D8t5g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 01 Nov 2026 20:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1f:1e:1c:ba:d3:b9:30:f9:78:77:87:d4:88:8d:d4:db:97:d6:99:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e32da3b9dc955f96cf1bf58c5748b7b80fcb798
Validity
Not Before: Oct 31 19:33:11 2026 GMT
Not After : Nov 1 22:15:11 2026 GMT
Subject: CN=BEBDE06FCE6CD8B03E6607490504775AF4C263C2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:2d:25:49:f3:ad:ca:86:21:be:ec:20:06:2c:
4c:af:b5:b9:fa:58:b0:0f:52:38:20:f4:47:96:77:
6e:b2:88:b9:4c:53:3e:de:48:7f:83:b0:00:4d:ea:
18:7a:e7:48:3c:34:9a:5b:0e:25:af:b4:e2:ec:bd:
93:3b:30:6a:d5:5a:cc:ae:14:5d:87:9e:84:e4:60:
68:cb:f2:bb:94:5c:9b:a0:8a:12:16:f7:22:4a:84:
9a:2e:e9:d8:ff:eb:31:35:ad:b7:40:50:b3:ea:2f:
32:a3:66:7c:db:1f:2d:c2:78:a5:2f:40:f3:3b:36:
6a:6c:18:9d:2e:1c:62:c0:82:7c:11:5d:b7:f1:c3:
3e:07:24:c0:3d:79:45:42:18:9c:fd:03:06:5d:f9:
08:5c:c5:43:d6:0f:61:78:55:7e:68:a7:d6:07:7c:
fd:fb:1c:58:91:86:7a:b3:35:f4:02:c3:3c:2e:8d:
32:2d:a8:78:2c:98:53:0e:b4:94:13:f6:ab:4f:8a:
f0:a0:cd:c1:41:55:1c:c8:0e:51:18:ee:fe:17:b7:
2a:9b:0a:c7:f5:ed:6b:a0:1b:0e:ac:b2:7c:ad:27:
66:59:c5:b8:70:57:71:66:e5:8f:23:82:f7:fa:c9:
ad:30:0a:bd:a5:46:71:b9:09:dd:75:a8:d2:b4:36:
79:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:BD:E0:6F:CE:6C:D8:B0:3E:66:07:49:05:04:77:5A:F4:C2:63:C2
X509v3 Authority Key Identifier:
keyid:3E:32:DA:3B:9D:C9:55:F9:6C:F1:BF:58:C5:74:8B:7B:80:FC:B7:98
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.rpki.tianhai.link/repo/TianhaiRpki/2/3E32DA3B9DC955F96CF1BF58C5748B7B80FCB798.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PjLaO53JVfls8b9YxXSLe4D8t5g.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.rpki.tianhai.link/repo/TianhaiRpki/2/3E32DA3B9DC955F96CF1BF58C5748B7B80FCB798.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:2a:98:c1:64:31:ee:da:59:e2:11:d9:04:94:ac:36:e9:b2:
0d:16:a7:d2:3d:d6:d6:36:3c:3c:91:c8:a7:a3:2f:ff:13:b6:
b1:b5:53:50:41:6a:11:60:cb:91:41:4d:08:80:14:96:d7:11:
4d:5c:0d:75:29:ea:d7:b0:ae:f6:72:2d:33:df:b4:b8:b5:ac:
c4:ae:83:20:b6:86:5e:63:dc:29:fd:f6:ed:d8:c0:50:c5:b9:
61:f3:b8:67:59:05:e8:15:3c:a1:76:1e:58:fc:4d:7b:14:fd:
f8:2a:94:08:04:31:be:d9:c8:cc:26:83:a6:e3:ce:d0:b4:0c:
d1:34:da:e3:62:84:be:06:48:c3:60:98:dd:eb:24:0e:49:5c:
9f:8e:31:2b:c1:76:67:d1:98:2f:38:f0:f0:28:28:6a:ff:23:
c7:63:3a:67:3d:6c:4d:b8:c5:4c:91:ff:84:a2:ba:ce:8c:6d:
bd:a0:96:1c:32:a0:cd:43:69:89:61:54:2d:e1:ef:d2:05:03:
de:de:90:53:d3:c7:0b:fb:e4:2b:82:5f:dc:88:07:b5:4f:da:
0c:56:ac:90:5a:dc:76:db:cb:52:cb:cb:b2:40:32:4a:32:ff:
48:9c:b5:68:71:24:9f:df:15:cd:b3:f9:91:d5:1d:f4:79:df:
c8:34:7a:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 1 01:52:09 2026 by rpki-client