---
name: "unmunge"
section: "1"
platform: "linux"
package: "munge"
version: "0.5.18-2"
release: "Arch Linux 2026-11-01"
platforms: ["linux"]
url: "https://new.carta.tech/unmunge"
---

# unmunge(1)

MUNGE credential decoder

## NAME

unmunge - MUNGE credential decoder

## SYNOPSIS

**unmunge** \[*OPTION*\]...

## DESCRIPTION

The **unmunge** program validates a MUNGE credential (e.g., one created by the **munge** program).

By default, the credential is read from stdin and the metadata and payload are written to stdout.  When the metadata and payload are written to the same stream, they are separated by a blank line.

## OPTIONS

- **-h, --help**

  Display a summary of the command-line options.

- **-L, --license**

  Display license information.

- **-V, --version**

  Display version information.

- **-i, --input** *path*

  Input the credential from the specified file.

- **-n, --no-output**

  Discard all output, both metadata and payload.

- **-m, --metadata** *path*

  Output metadata to the specified file.

- **-o, --output** *path*

  Output the payload to the specified file.

- **-k, --keys** *string*

  Specify a subset of metadata keys to output.  The keys are case-insensitive and delimited by whitespace, commas, semicolons, or periods -- as long as the string is treated as a single argument by the shell (e.g., enclosed by quotes).  Invalid keys are ignored.  If a subset is not specified, all available keys are selected by default.

- **-K, --list-keys**

  Display a list of metadata keys.

- **-N, --numeric**

  Display metadata values numerically.  This omits conversions from IP addresses to hostnames, seconds to date and time strings, UIDs to user names, GIDs to group names, and cipher/mac/zip type lookups.

- **-S, --socket** *path*

  Specify the local socket for connecting with **munged**.

- **--ignore-ttl**

  Ignore expired, rewound, and replayed errors.

- **--ignore-replay**

  Ignore replayed errors.

## METADATA KEYS

The following metadata keys are supported.

- **STATUS**

  The status of the credential decode operation.

- **ENCODE\_HOST**

  The address of the host on which the credential was encoded.

- **ENCODE\_TIME**

  The time at which the credential was encoded (according to the local clock of the host that encoded it).

- **DECODE\_TIME**

  The time at which the credential was decoded (according to the local clock of the host that decoded it).

- **TTL**

  The time-to-live value (in seconds) placed within the credential.

- **CIPHER**

  The cipher type used to encode the credential.

- **MAC**

  The MAC type used to encode the credential.

- **ZIP**

  The compression type used to encode the credential.

- **UID**

  The user ID of the process that encoded the credential.

- **GID**

  The group ID of the process that encoded the credential.

- **UID\_RESTRICTION**

  The user ID restriction placed within the credential.

- **GID\_RESTRICTION**

  The group ID restriction placed within the credential.

- **LENGTH**

  The length (in bytes) of the payload.

## EXIT STATUS

The **unmunge** program returns an exit code corresponding to the return code of **munge\_decode**().  On success, it returns a zero exit code which signifies the credential is valid.  On error, it prints an error message to stderr and returns a non-zero exit code.

## AUTHOR

Chris Dunlap \<cdunlap@llnl.gov\>

## COPYRIGHT

Copyright (C) 2007-2025 Lawrence Livermore National Security, LLC.\
 Copyright (C) 2002-2007 The Regents of the University of California.

MUNGE is free software: you can redistribute it and/or modify it under the terms of the GNU General Public License as published by the Free Software Foundation, either version 3 of the License, or (at your option) any later version.

Additionally for the MUNGE library (libmunge), you can redistribute it and/or modify it under the terms of the GNU Lesser General Public License as published by the Free Software Foundation, either version 3 of the License, or (at your option) any later version.

## SEE ALSO

[**munge**(1)](/munge/1.md), [**remunge**(1)](/remunge/1.md), [**munge**(3)](/munge/3.md), [**munge\_ctx**(3)](/munge_ctx/3.md), [**munge\_enum**(3)](/munge_enum/3.md), [**munge**(7)](/munge/7.md), [**munged**(8)](/munged/8.md), [**mungekey**(8)](/mungekey/8.md).

**https://github.com/dun/munge**