Certificate
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/6E011NZFnvXzVT6jEODGW7Ow8Nk.cer
File: 6E011NZFnvXzVT6jEODGW7Ow8Nk.cer (raw, json)
Hash identifier: cfKtQ2Y0s5MCjxKsHIWbVTY20mBPngLJaLnLI5rei+k=
Subject key identifier: E8:4D:35:D4:D6:45:9E:F5:F3:55:3E:A3:10:E0:C6:5B:B3:B0:F0:D9
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01A043AF81D0575F70BC3307548A9CB5BE1A
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/39/ec3f8c-dc7a-40d2-8f44-a524838776bd/1/6E011NZFnvXzVT6jEODGW7Ow8Nk.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/39/ec3f8c-dc7a-40d2-8f44-a524838776bd/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 27 Aug 2026 14:46:10 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: IP: 87.192.32.0/19
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 05:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:43:af:81:d0:57:5f:70:bc:33:07:54:8a:9c:b5:be:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Aug 27 14:46:10 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=e84d35d4d6459ef5f3553ea310e0c65bb3b0f0d9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:87:2e:6c:e6:5a:3f:75:d7:cb:e1:53:4d:2e:
8a:3d:50:97:c1:ae:9d:09:d4:95:7d:3c:24:94:b0:
55:d1:7d:5a:44:39:5c:fd:f3:2c:72:1f:b9:14:5b:
6c:98:7e:26:02:fb:f8:2b:18:76:2d:46:67:91:86:
14:6c:3e:7f:5b:56:d1:6d:86:cb:b7:eb:93:f4:8d:
8a:21:85:0f:d5:d3:92:93:bf:f7:59:a5:45:3a:86:
4f:8d:84:36:74:50:bd:6e:4d:d4:fa:cf:d7:fe:31:
7b:c2:fe:13:8b:ed:a0:d4:7b:6f:82:c7:67:be:8f:
56:06:7e:03:4c:28:30:2f:6b:ec:0f:ae:06:cf:16:
25:1e:75:7e:6a:b3:22:21:81:42:0a:13:4d:c7:2d:
c0:18:90:71:a2:a2:6a:7b:5d:33:72:51:7d:64:50:
25:bf:94:24:ac:93:33:ca:fc:62:f7:59:fd:0d:27:
ab:63:c4:e6:a2:2f:1f:fe:f8:08:d5:02:99:70:fa:
56:6a:0a:e3:f1:a5:80:53:3f:c3:1b:60:31:d8:fe:
80:c7:00:a3:50:d2:9e:4a:43:c5:de:e2:8a:6d:39:
25:fe:eb:0e:a4:d4:c1:ea:c5:28:10:bb:cd:06:62:
e2:95:82:8c:62:64:9b:0c:c4:7c:1d:02:e3:dd:2f:
94:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:4D:35:D4:D6:45:9E:F5:F3:55:3E:A3:10:E0:C6:5B:B3:B0:F0:D9
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/ec3f8c-dc7a-40d2-8f44-a524838776bd/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/ec3f8c-dc7a-40d2-8f44-a524838776bd/1/6E011NZFnvXzVT6jEODGW7Ow8Nk.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.192.32.0/19
Signature Algorithm: sha256WithRSAEncryption
42:a1:31:f2:e9:34:b0:95:1c:01:21:5c:1b:a9:df:b5:77:0a:
72:60:68:df:91:b6:83:05:c2:e8:02:b3:44:f7:62:d0:76:f3:
6c:6a:48:87:03:88:74:ed:bb:94:f1:cb:a0:82:0e:f9:af:ec:
02:9a:44:15:dd:a6:9d:5f:71:72:0c:1a:7d:9e:12:c8:8f:3f:
a6:bd:0c:83:63:33:38:5e:11:bf:bb:e9:e9:30:0d:8e:56:a2:
90:9e:8a:f0:78:da:7b:58:2b:bb:6f:e3:18:90:ec:2f:d3:11:
86:4f:2f:ca:73:9a:50:b2:dc:4b:9a:8e:48:d9:f6:e3:76:17:
c6:47:0f:b1:76:20:7e:0c:c7:2a:f5:a5:28:cc:b4:b6:ca:95:
eb:33:54:36:11:37:1f:50:5d:53:c7:46:76:2f:4f:a9:b8:b6:
a4:4d:9f:ad:aa:4a:7e:e1:2c:e8:e3:c0:da:1a:65:48:fb:d1:
cd:4d:fa:05:46:a8:6f:a7:6b:df:0f:91:bc:5b:dd:96:43:3c:
c0:54:6f:bf:7d:28:48:84:14:9f:c9:4c:78:75:48:d0:44:75:
1c:a0:bb:31:72:b7:5a:6d:51:59:28:29:21:02:fe:51:5d:fc:
6e:8d:63:46:c4:34:5e:d6:7b:34:6e:92:35:da:a9:fb:e8:96:
4c:b7:4e:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 13:19:22 2026 by rpki-client