
Certificate
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/6E011NZFnvXzVT6jEODGW7Ow8Nk.cer
File: 6E011NZFnvXzVT6jEODGW7Ow8Nk.cer (raw, json)
Hash identifier: /guJpRRAg82HFzqzhwinnBXFbxjqXO+mvW3lnrv0h74=
Subject key identifier: E8:4D:35:D4:D6:45:9E:F5:F3:55:3E:A3:10:E0:C6:5B:B3:B0:F0:D9
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01A0F0D93F8CCA3BE975BE629248BB5242AE
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/39/ec3f8c-dc7a-40d2-8f44-a524838776bd/1/6E011NZFnvXzVT6jEODGW7Ow8Nk.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/39/ec3f8c-dc7a-40d2-8f44-a524838776bd/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 30 Sep 2026 05:46:04 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: IP: 82.148.224.0/19
IP: 87.192.32.0/19
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 02 Oct 2026 14:02:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:f0:d9:3f:8c:ca:3b:e9:75:be:62:92:48:bb:52:42:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Sep 30 05:46:04 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=e84d35d4d6459ef5f3553ea310e0c65bb3b0f0d9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:87:2e:6c:e6:5a:3f:75:d7:cb:e1:53:4d:2e:
8a:3d:50:97:c1:ae:9d:09:d4:95:7d:3c:24:94:b0:
55:d1:7d:5a:44:39:5c:fd:f3:2c:72:1f:b9:14:5b:
6c:98:7e:26:02:fb:f8:2b:18:76:2d:46:67:91:86:
14:6c:3e:7f:5b:56:d1:6d:86:cb:b7:eb:93:f4:8d:
8a:21:85:0f:d5:d3:92:93:bf:f7:59:a5:45:3a:86:
4f:8d:84:36:74:50:bd:6e:4d:d4:fa:cf:d7:fe:31:
7b:c2:fe:13:8b:ed:a0:d4:7b:6f:82:c7:67:be:8f:
56:06:7e:03:4c:28:30:2f:6b:ec:0f:ae:06:cf:16:
25:1e:75:7e:6a:b3:22:21:81:42:0a:13:4d:c7:2d:
c0:18:90:71:a2:a2:6a:7b:5d:33:72:51:7d:64:50:
25:bf:94:24:ac:93:33:ca:fc:62:f7:59:fd:0d:27:
ab:63:c4:e6:a2:2f:1f:fe:f8:08:d5:02:99:70:fa:
56:6a:0a:e3:f1:a5:80:53:3f:c3:1b:60:31:d8:fe:
80:c7:00:a3:50:d2:9e:4a:43:c5:de:e2:8a:6d:39:
25:fe:eb:0e:a4:d4:c1:ea:c5:28:10:bb:cd:06:62:
e2:95:82:8c:62:64:9b:0c:c4:7c:1d:02:e3:dd:2f:
94:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:4D:35:D4:D6:45:9E:F5:F3:55:3E:A3:10:E0:C6:5B:B3:B0:F0:D9
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/ec3f8c-dc7a-40d2-8f44-a524838776bd/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/ec3f8c-dc7a-40d2-8f44-a524838776bd/1/6E011NZFnvXzVT6jEODGW7Ow8Nk.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.148.224.0/19
87.192.32.0/19
Signature Algorithm: sha256WithRSAEncryption
59:04:3b:2e:f2:7f:a4:38:6e:e3:b3:2e:05:cc:08:05:f3:f4:
f9:62:4e:0e:78:9c:d3:63:10:d0:be:4b:5f:e8:8f:b4:95:2a:
73:18:77:60:98:24:21:4d:8f:0b:0c:54:d8:ac:39:cb:76:21:
3e:f4:0b:ef:c1:7c:93:2e:c9:98:a7:6e:45:8b:1c:89:89:f9:
20:bf:34:37:8d:70:10:78:e1:fd:46:4e:ed:c8:fa:5a:e5:44:
1a:df:c2:c1:7c:ff:e3:f6:5d:a6:65:68:2b:ae:98:90:b1:69:
7e:0c:49:6c:8f:52:ee:96:f6:51:95:49:bb:50:cd:d5:78:42:
0b:6a:44:30:1e:36:a5:5d:58:5f:d9:7a:f1:2f:91:ea:da:84:
02:71:60:37:0e:60:92:21:53:ea:45:f0:82:31:82:8e:43:0e:
cc:dc:d7:f6:d6:30:36:c2:6c:4c:63:72:d7:a8:87:44:f5:5c:
d2:cc:71:07:5d:50:6c:3f:4a:67:9a:f6:23:3c:d8:66:eb:d1:
c2:78:22:a2:38:df:b2:28:88:da:40:2a:61:3d:cb:74:8b:31:
32:13:49:cf:c8:dd:60:8f:1b:bd:a5:ea:30:71:49:67:61:74:
a8:9b:7f:bb:62:ac:1d:97:6e:3c:14:64:4b:29:a5:63:d4:b5:
d8:43:65:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 2 02:55:28 2026 by rpki-client