Certificate
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/1-FF32BAciIEYtZ3yNaYDWCF7E7w.cer
File: 1-FF32BAciIEYtZ3yNaYDWCF7E7w.cer (raw, json)
Hash identifier: UsoFGarZIBmhVS0Sr1S4dq8xH3HJ0WDznIjtjopMN+U=
Subject key identifier: F8:51:77:D8:10:1C:88:81:18:B5:9D:F2:35:A6:03:58:21:7B:13:BC
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01A0D26818D2A75289FAD90087A86E617279
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/f1/f28f0d-2141-4332-8ad5-ccbff8e9bc37/1/1-FF32BAciIEYtZ3yNaYDWCF7E7w.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/f1/f28f0d-2141-4332-8ad5-ccbff8e9bc37/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 24 Sep 2026 07:53:52 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: IP: 140.184.32.0/19
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 21 Oct 2026 17:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d2:68:18:d2:a7:52:89:fa:d9:00:87:a8:6e:61:72:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Sep 24 07:53:52 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=f85177d8101c888118b59df235a60358217b13bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:b2:a2:ef:5e:00:4a:62:66:82:3a:34:92:af:
29:ec:f3:bc:ed:ba:6f:f3:18:f5:36:0c:70:0d:18:
f0:ad:06:e3:a0:cf:c2:c0:b1:50:da:0b:97:bb:e2:
5a:1a:7b:b2:36:6d:f4:11:67:e7:e8:4b:33:0c:45:
97:66:f7:34:5c:d2:03:a9:20:49:1d:46:28:1a:8f:
86:2d:b8:70:7e:cc:7e:8f:07:94:18:aa:5d:dd:f0:
54:21:16:a7:2b:33:9a:30:0d:1e:d2:ff:2f:ff:09:
8f:ff:57:00:93:73:da:de:ec:e1:5b:8e:1e:70:d8:
9f:26:b9:dd:ce:05:14:0a:c7:91:26:bb:af:0a:e2:
1a:03:37:aa:ae:6f:ab:89:27:31:5f:cb:88:e9:8c:
9e:03:b5:4e:bc:1b:5d:6e:95:af:39:0f:6b:45:a8:
dd:2e:6e:ca:39:58:c1:85:d4:55:32:a9:01:f5:cc:
d2:a1:19:a2:5e:e7:bc:f5:0e:72:54:8a:ec:2e:80:
6b:08:f8:13:e0:07:04:d1:b8:08:b9:54:de:21:57:
cd:4d:c0:85:94:3d:91:ef:dd:e7:47:78:9a:34:f4:
8e:2d:7e:94:20:33:a2:7c:15:a6:f5:07:45:39:1d:
92:a6:71:f0:ba:c0:5b:5a:ff:4c:25:83:0c:e8:88:
f0:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:51:77:D8:10:1C:88:81:18:B5:9D:F2:35:A6:03:58:21:7B:13:BC
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/f28f0d-2141-4332-8ad5-ccbff8e9bc37/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/f28f0d-2141-4332-8ad5-ccbff8e9bc37/1/1-FF32BAciIEYtZ3yNaYDWCF7E7w.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
140.184.32.0/19
Signature Algorithm: sha256WithRSAEncryption
2b:1a:b4:90:6d:dc:30:14:95:f8:47:00:aa:67:bf:c3:b1:4e:
02:b0:60:9e:bc:23:be:65:60:fb:c9:8d:0c:5a:39:09:57:4b:
37:87:12:c0:08:a8:16:13:69:54:a0:12:02:2e:53:68:cb:0b:
51:cd:e1:d3:57:dd:67:b7:ab:79:ff:e0:b1:55:1b:a2:e4:c9:
d7:49:e3:7b:dc:7f:94:9b:79:3b:ce:ae:23:ea:92:2d:a9:58:
ad:b5:fe:0d:da:01:bc:11:f5:07:85:a0:2a:0d:2c:83:8f:d6:
6f:60:24:4f:46:10:8f:e3:f4:39:2c:14:02:ae:8c:39:80:db:
7f:c7:a7:7d:7e:fa:ae:df:d4:3f:18:86:8f:70:d7:4d:29:52:
d1:7d:96:d4:3c:73:97:f9:43:0e:b6:af:30:5c:5d:d4:5b:04:
21:43:22:55:cb:c0:a1:86:46:cd:19:66:66:6a:4a:bd:c1:9f:
92:16:d6:6e:11:1e:d1:ac:04:c2:f3:aa:24:59:15:7a:a3:c7:
6e:aa:b0:12:a9:60:f2:bf:ff:14:e8:29:28:02:bd:dd:7d:84:
1b:be:a6:07:e4:fe:f5:d2:b9:b5:ff:83:c0:59:45:fa:72:29:
58:88:24:ba:36:7b:03:76:b6:39:07:ec:cb:3c:20:fe:19:ae:
ae:ed:d6:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 21 05:22:27 2026 by rpki-client