Certificate
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/mOaFDEKeTtUtdoC6mZnABVlZ9cs.cer
File: mOaFDEKeTtUtdoC6mZnABVlZ9cs.cer (raw, json)
Hash identifier: NamfzmLfxiuBMm/3z0unHKObNYp7MX8CHGGRSOFd4iI=
Subject key identifier: 98:E6:85:0C:42:9E:4E:D5:2D:76:80:BA:99:99:C0:05:59:59:F5:CB
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01A0C7E4ED9688E2C2C1188F1A92720B928A
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/e8/e05343-401b-4bf9-abdd-6ecd3226a2c5/1/mOaFDEKeTtUtdoC6mZnABVlZ9cs.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/e8/e05343-401b-4bf9-abdd-6ecd3226a2c5/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 22 Sep 2026 06:54:24 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: IP: 193.38.143.0/24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 14:17:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c7:e4:ed:96:88:e2:c2:c1:18:8f:1a:92:72:0b:92:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Sep 22 06:54:24 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=98e6850c429e4ed52d7680ba9999c0055959f5cb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:37:d0:92:4b:6f:a8:84:82:92:f3:c7:38:c0:
9c:25:2c:fb:d5:6e:6b:66:30:bf:7c:6b:d6:a4:36:
5c:fb:6c:6f:c4:b3:09:01:a3:00:5b:fe:54:b4:83:
29:8e:b6:55:63:53:5e:dc:8d:12:da:b7:79:b5:22:
a7:03:37:ba:fd:f5:08:13:ed:bd:b8:1a:15:3e:a7:
4f:ad:18:bb:02:87:f9:f2:e5:42:85:e1:4a:15:af:
00:53:63:38:04:18:5c:6e:9e:f5:ca:03:3f:77:f6:
22:19:53:6f:33:02:db:3c:24:6f:a0:54:48:0c:6f:
50:29:7f:d4:c3:4c:aa:16:f7:21:01:ff:6c:10:77:
44:46:8b:6f:55:5f:7a:95:dd:93:54:cc:10:e3:1e:
ff:26:9c:f2:c1:79:24:ce:d7:bb:21:6d:36:bf:d7:
c1:be:b8:2f:d6:b1:fb:34:27:b1:4e:ea:11:47:a5:
d3:b0:8e:34:6e:39:3d:96:25:72:f4:bb:52:d0:11:
42:b8:c1:40:b6:f3:85:bf:1f:12:d8:fc:aa:48:9f:
01:b4:85:6b:ad:50:1a:ad:db:3f:e5:8f:a8:9a:e1:
d8:32:60:03:aa:4f:e9:af:80:51:73:dc:41:28:10:
db:31:36:ca:39:0d:38:c7:b4:11:01:45:05:38:a5:
f7:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:E6:85:0C:42:9E:4E:D5:2D:76:80:BA:99:99:C0:05:59:59:F5:CB
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/e05343-401b-4bf9-abdd-6ecd3226a2c5/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/e05343-401b-4bf9-abdd-6ecd3226a2c5/1/mOaFDEKeTtUtdoC6mZnABVlZ9cs.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.38.143.0/24
Signature Algorithm: sha256WithRSAEncryption
a8:96:6e:55:32:5e:4e:59:a6:1d:f0:cb:9b:37:45:ac:2d:74:
a5:21:cd:85:e7:b7:91:0c:30:78:4c:43:c4:42:99:cc:5b:9a:
f0:91:aa:e3:15:7b:a3:8e:34:2f:25:7c:b2:2b:bc:3d:a7:e4:
2b:5a:43:86:9c:72:bc:eb:61:43:f4:fa:70:0f:78:29:3e:f8:
86:48:33:dc:75:6f:cd:53:50:d0:93:7b:c7:a3:85:69:03:62:
fe:1a:97:84:00:10:bd:ed:05:13:38:6f:ed:0b:eb:67:62:dc:
f8:57:3f:c9:92:5d:5b:6f:9c:f0:f6:f8:f5:06:a7:ff:2b:51:
16:02:bd:2b:28:c9:93:74:39:e9:af:82:2f:02:be:84:22:02:
6c:d1:fe:38:e3:d7:c5:15:60:c2:2c:3d:df:b9:30:ca:d1:17:
04:83:a2:87:e1:1f:98:6b:b3:ae:9f:02:6b:e7:18:f4:fc:80:
58:9b:9e:c7:b1:f6:5f:69:8f:4b:79:85:4e:9f:ed:db:5e:04:
e3:ec:eb:74:08:a5:e0:83:dc:78:d1:82:a1:f8:b3:44:22:1d:
40:80:e2:df:fe:e6:b0:e9:b3:fc:98:0d:b0:8e:ee:85:50:47:
81:3b:04:dc:8b:20:6f:82:3c:b9:28:9f:a8:d9:79:ee:4b:d9:
45:96:10:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 18:32:36 2026 by rpki-client