Certificate
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/LvZ7dM6PKkyjUBY6ez4Tw3Fzx64.cer
File: LvZ7dM6PKkyjUBY6ez4Tw3Fzx64.cer (raw, json)
Hash identifier: NAyO6PatuxGTdeZIbMzTPpJDshFGdktZkP+CK9S8OYM=
Subject key identifier: 2E:F6:7B:74:CE:8F:2A:4C:A3:50:16:3A:7B:3E:13:C3:71:73:C7:AE
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01A015EABD35046B903050E66FA2EA85C8A6
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/8b/19ce75-14e3-4707-af45-0f93ee335c23/1/LvZ7dM6PKkyjUBY6ez4Tw3Fzx64.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/8b/19ce75-14e3-4707-af45-0f93ee335c23/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 18 Aug 2026 17:28:20 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: IP: 136.176.192.0/19
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 04 Sep 2026 22:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:15:ea:bd:35:04:6b:90:30:50:e6:6f:a2:ea:85:c8:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Aug 18 17:28:20 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=2ef67b74ce8f2a4ca350163a7b3e13c37173c7ae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:0e:62:64:ea:f1:a8:51:d0:c1:46:38:24:0d:
cf:e7:2f:41:00:9f:95:b8:da:98:48:28:cb:be:98:
73:48:d9:ad:54:4c:0e:db:0d:4e:d2:f4:6f:25:67:
fb:cd:87:b8:6e:ca:ae:5e:c3:f5:5c:72:cf:df:e4:
5f:d8:44:ac:0a:15:ca:bf:5a:be:a8:52:e5:a9:12:
f2:c3:98:8e:b5:10:3e:0c:f1:a4:49:f0:59:f3:e3:
dc:61:a1:ac:b2:a8:3d:5f:d6:82:71:c7:56:f1:f4:
b3:d4:2a:21:cf:a1:54:d9:38:43:70:88:73:fd:a0:
37:9a:78:a6:6f:84:3d:41:d8:0c:4a:12:50:70:c9:
2d:75:55:db:ac:79:9d:5a:20:65:f7:87:82:61:24:
a4:da:52:4f:d1:05:34:9a:c0:ab:88:2e:f6:d5:2a:
e0:d0:a0:92:7a:88:b4:99:ff:b1:fc:55:aa:ed:54:
44:09:23:7d:f4:93:41:7f:43:ed:99:08:7c:fe:3c:
fe:9b:98:b6:ea:cd:2e:70:83:4c:e1:65:f0:f5:0e:
98:34:0c:35:29:2d:1c:fa:d0:4c:c8:4b:2a:09:d4:
13:09:a9:d4:eb:c3:91:69:e8:bf:2a:64:28:a4:f5:
75:d6:8f:f0:49:84:32:ac:41:87:bf:11:4a:12:30:
94:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:F6:7B:74:CE:8F:2A:4C:A3:50:16:3A:7B:3E:13:C3:71:73:C7:AE
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/19ce75-14e3-4707-af45-0f93ee335c23/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/19ce75-14e3-4707-af45-0f93ee335c23/1/LvZ7dM6PKkyjUBY6ez4Tw3Fzx64.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
136.176.192.0/19
Signature Algorithm: sha256WithRSAEncryption
2e:8d:02:03:e4:11:5d:4b:98:90:09:9b:13:59:e2:77:c9:57:
f7:28:1f:e7:cf:eb:89:32:49:bd:5e:3c:39:b4:c2:a0:58:5d:
ab:c6:51:47:ac:14:39:2e:be:3a:ab:ee:94:78:7f:d6:fd:2f:
23:43:ff:93:d3:85:db:72:c9:2a:b0:8e:a0:28:77:16:8c:74:
09:cd:1a:86:14:c4:55:54:66:93:a9:08:1d:9d:27:eb:46:51:
f6:86:35:4f:30:dc:a8:d8:75:9e:21:a7:3e:dc:92:c4:df:c6:
64:82:85:46:63:ed:95:d5:ca:ad:be:e7:c1:62:7d:76:80:4d:
73:d0:50:59:b8:23:5c:62:07:8c:ba:0d:26:72:df:d6:e1:7e:
ef:47:47:52:e8:14:5d:b8:05:1e:1d:08:ff:54:98:69:2d:ed:
ad:1e:9e:e9:a3:9a:a4:fa:26:0a:20:92:fb:cd:8e:dc:7a:a4:
5e:9b:67:80:0e:df:0c:53:4d:8d:41:02:11:08:84:b6:45:98:
86:49:86:91:f6:0b:f2:82:9e:38:1f:95:d8:d5:da:3c:bb:4a:
8d:3f:5d:57:bc:16:22:df:45:79:ef:83:52:e2:e2:8f:da:dc:
d9:f1:33:c0:14:f5:a8:88:20:ba:cf:a7:da:05:dd:d4:6c:fd:
c7:fc:7b:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 4 00:14:20 2026 by rpki-client