Certificate
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/FtFp1yjVl4zEAbZ-o2mkP0G-7oo.cer
File: FtFp1yjVl4zEAbZ-o2mkP0G-7oo.cer (raw, json)
Hash identifier: NavRN5xVyfKwEups4kYQrWRc7LW3QOV1Y0BRP1cV+N4=
Subject key identifier: 16:D1:69:D7:28:D5:97:8C:C4:01:B6:7E:A3:69:A4:3F:41:BE:EE:8A
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01A10C875D5BF7360D65D69A0F2C05C72418
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/55/2d37ac-ac61-49c6-8b5d-2bd9607a18c5/1/FtFp1yjVl4zEAbZ-o2mkP0G-7oo.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/55/2d37ac-ac61-49c6-8b5d-2bd9607a18c5/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 05 Oct 2026 14:46:00 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 218504
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 27 Oct 2026 20:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:0c:87:5d:5b:f7:36:0d:65:d6:9a:0f:2c:05:c7:24:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Oct 5 14:46:00 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=16d169d728d5978cc401b67ea369a43f41beee8a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:2e:be:8b:4e:48:dd:80:3f:5a:53:3a:67:52:
17:93:78:78:c9:29:67:cf:fb:49:12:21:5d:83:47:
0a:3e:86:f2:b9:be:52:00:13:5c:7a:d7:cc:5b:73:
c7:11:bc:d4:62:60:00:e7:4c:2f:d2:6f:ad:95:7d:
57:7d:76:41:be:6d:cf:9d:7f:30:5c:2b:d6:2f:78:
40:f2:9f:9e:06:43:05:11:4b:db:0e:cb:a4:4e:b9:
a4:0e:30:66:0e:45:9c:2b:66:b9:2f:01:c3:3f:07:
f7:28:b2:03:7a:f8:22:42:94:af:b8:31:88:35:63:
f0:03:df:ba:28:7e:d0:1d:d0:76:8f:ee:8c:d9:d5:
5a:4c:62:30:01:f4:b6:1e:88:00:68:f1:ca:77:3a:
58:bb:a5:a8:97:9a:f1:db:6e:97:77:18:84:04:e4:
32:33:8e:43:4f:9f:82:62:e6:21:fc:82:d6:f9:a1:
68:df:f8:0f:43:a8:4b:68:87:ce:4c:c0:10:42:c7:
a6:d9:a4:a1:e7:1d:ab:b2:04:2d:81:13:51:40:63:
6c:f1:ae:4f:bb:a8:8e:09:2d:0f:f9:7a:87:a3:d8:
fb:91:2e:29:ac:d9:29:d9:85:ce:23:5a:4e:17:94:
04:e4:7b:6c:8e:2b:46:ab:62:4a:d4:d4:c8:ee:e9:
0b:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:D1:69:D7:28:D5:97:8C:C4:01:B6:7E:A3:69:A4:3F:41:BE:EE:8A
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/2d37ac-ac61-49c6-8b5d-2bd9607a18c5/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/2d37ac-ac61-49c6-8b5d-2bd9607a18c5/1/FtFp1yjVl4zEAbZ-o2mkP0G-7oo.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
218504
Signature Algorithm: sha256WithRSAEncryption
88:7c:f3:34:00:10:65:52:e7:67:ac:ef:aa:58:17:a0:08:0e:
35:f2:55:db:7e:fe:30:62:86:0c:7b:81:8c:2c:c7:79:0a:8a:
9c:ad:6a:e6:90:44:cf:49:b2:37:38:db:b8:b5:9e:98:66:fc:
c3:ca:c6:8e:05:61:57:47:f6:5d:ee:83:29:97:32:2b:b5:bb:
8b:8c:7a:df:87:0c:59:0e:c8:ca:a3:54:c5:c5:10:b5:0a:38:
d6:70:90:c0:65:8c:8c:89:1c:03:28:95:c1:8d:1e:df:8a:a2:
95:70:84:3c:be:f7:f1:14:58:78:8c:c1:c2:0d:11:2e:c0:c2:
a6:d9:7c:9c:53:ce:1b:ab:e9:18:21:e4:b3:ac:e2:41:a7:12:
9d:04:ee:83:db:52:4d:ba:50:3b:4c:a5:91:e3:f9:8f:c4:47:
99:07:c6:2c:98:a7:75:e1:a4:88:9e:10:d9:d9:d8:90:88:42:
2e:6f:34:53:57:fb:d3:5d:37:13:01:e6:22:94:c7:68:18:2c:
11:db:b4:ec:62:ed:16:c9:17:3a:3d:b5:61:af:6c:b6:fa:22:
41:f0:5a:95:ef:b0:67:f8:cb:05:b8:a3:d8:bb:9e:20:d6:4f:
51:cb:6d:aa:24:63:e0:92:6b:65:6a:b0:a1:a5:53:8a:56:67:
04:69:a4:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 04:53:49 2026 by rpki-client