Certificate
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/6E011NZFnvXzVT6jEODGW7Ow8Nk.cer
File: 6E011NZFnvXzVT6jEODGW7Ow8Nk.cer (raw, json)
Hash identifier: BPiU5uylV+A+xHRzfZxv/gkxHA1Wk3RgB7SOqLfS2Oo=
Subject key identifier: E8:4D:35:D4:D6:45:9E:F5:F3:55:3E:A3:10:E0:C6:5B:B3:B0:F0:D9
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01A1683DD6C4523B8C38F45F0DD1CC407A53
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/39/ec3f8c-dc7a-40d2-8f44-a524838776bd/1/6E011NZFnvXzVT6jEODGW7Ow8Nk.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/39/ec3f8c-dc7a-40d2-8f44-a524838776bd/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Fri 23 Oct 2026 10:10:45 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: IP: 82.148.224.0/19
IP: 83.141.64.0/19
IP: 83.141.112.0/20
IP: 87.192.32.0/19
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 06 Nov 2026 08:45:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:68:3d:d6:c4:52:3b:8c:38:f4:5f:0d:d1:cc:40:7a:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Oct 23 10:10:45 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=e84d35d4d6459ef5f3553ea310e0c65bb3b0f0d9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:87:2e:6c:e6:5a:3f:75:d7:cb:e1:53:4d:2e:
8a:3d:50:97:c1:ae:9d:09:d4:95:7d:3c:24:94:b0:
55:d1:7d:5a:44:39:5c:fd:f3:2c:72:1f:b9:14:5b:
6c:98:7e:26:02:fb:f8:2b:18:76:2d:46:67:91:86:
14:6c:3e:7f:5b:56:d1:6d:86:cb:b7:eb:93:f4:8d:
8a:21:85:0f:d5:d3:92:93:bf:f7:59:a5:45:3a:86:
4f:8d:84:36:74:50:bd:6e:4d:d4:fa:cf:d7:fe:31:
7b:c2:fe:13:8b:ed:a0:d4:7b:6f:82:c7:67:be:8f:
56:06:7e:03:4c:28:30:2f:6b:ec:0f:ae:06:cf:16:
25:1e:75:7e:6a:b3:22:21:81:42:0a:13:4d:c7:2d:
c0:18:90:71:a2:a2:6a:7b:5d:33:72:51:7d:64:50:
25:bf:94:24:ac:93:33:ca:fc:62:f7:59:fd:0d:27:
ab:63:c4:e6:a2:2f:1f:fe:f8:08:d5:02:99:70:fa:
56:6a:0a:e3:f1:a5:80:53:3f:c3:1b:60:31:d8:fe:
80:c7:00:a3:50:d2:9e:4a:43:c5:de:e2:8a:6d:39:
25:fe:eb:0e:a4:d4:c1:ea:c5:28:10:bb:cd:06:62:
e2:95:82:8c:62:64:9b:0c:c4:7c:1d:02:e3:dd:2f:
94:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:4D:35:D4:D6:45:9E:F5:F3:55:3E:A3:10:E0:C6:5B:B3:B0:F0:D9
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/ec3f8c-dc7a-40d2-8f44-a524838776bd/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/ec3f8c-dc7a-40d2-8f44-a524838776bd/1/6E011NZFnvXzVT6jEODGW7Ow8Nk.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.148.224.0/19
83.141.64.0/19
83.141.112.0/20
87.192.32.0/19
Signature Algorithm: sha256WithRSAEncryption
66:15:4e:e9:33:ea:da:e4:6e:30:ca:ac:dd:ad:16:85:27:4f:
e4:fc:8d:e4:87:b3:ed:72:b4:87:34:05:5b:bb:4b:32:75:b8:
10:cc:7c:06:02:38:ee:fe:83:50:cd:94:95:43:83:10:82:87:
ab:ab:04:32:61:d0:34:3a:1b:e8:0d:cd:9d:44:ef:7f:f9:57:
96:b7:41:93:67:69:7b:61:60:b1:3d:c0:87:35:fe:5e:65:e0:
31:07:65:ca:6a:e6:ff:eb:f0:d2:63:76:b6:fa:31:7d:58:6d:
6b:f3:ad:84:55:4b:95:cc:4c:e7:3f:1b:a5:9b:72:b9:6d:a6:
f0:fa:c5:26:0c:f0:cd:98:d8:7e:bb:71:74:5b:e0:d4:98:81:
35:1a:3b:c2:32:f6:6d:ea:0e:24:27:18:98:05:85:7c:a4:cf:
9f:6e:ef:6f:bb:9a:20:72:5c:7e:0b:c7:2b:f1:55:d6:f9:38:
c2:ce:6a:19:72:d9:74:23:2b:86:74:ba:0b:09:5b:1e:63:a5:
1f:f6:b9:5d:3d:d5:ef:fb:88:a7:83:e8:ad:94:d8:9c:d9:ef:
19:bb:55:8e:5e:9b:0c:70:21:20:7e:15:5e:10:56:f3:a8:64:
32:56:0f:38:c6:11:f1:cb:50:e2:92:07:23:b2:a7:ea:dd:81:
f6:cd:66:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 5 17:26:23 2026 by rpki-client