{
    "mode": "man",
    "parameter": "dirmngr-client",
    "section": "1",
    "url": "https://www.chedong.com/phpMan.php/man/dirmngr-client/1/json",
    "generated": "2026-06-15T13:16:03Z",
    "synopsis": "dirmngr-client [options] [certfile|pattern]",
    "sections": {
        "NAME": {
            "content": "dirmngr-client - Tool to access the Dirmngr services\n",
            "subsections": []
        },
        "SYNOPSIS": {
            "content": "dirmngr-client [options] [certfile|pattern]\n\n",
            "subsections": []
        },
        "DESCRIPTION": {
            "content": "The  dirmngr-client is a simple tool to contact a running dirmngr and test whether a certifi‐\ncate has been revoked --- either by being listed in the corresponding CRL or by  running  the\nOCSP protocol.  If no dirmngr is running, a new instances will be started but this is in gen‐\neral not a good idea due to the huge performance overhead.\n\n\nThe usual way to run this tool is either:\n\ndirmngr-client acert\n\n\nor\n\ndirmngr-client <acert\n\nWhere acert is one DER encoded (binary) X.509 certificates to be tested.\n\n",
            "subsections": []
        },
        "RETURN VALUE": {
            "content": "dirmngr-client returns these values:\n\n\n0      The certificate under question is valid; i.e. there is a valid CRL available and it is\nnot listed there or the OCSP request returned that that certificate is valid.\n\n\n1      The certificate has been revoked\n\n",
            "subsections": [
                {
                    "name": "2 (and other values)",
                    "content": "There  was  a  problem checking the revocation state of the certificate.  A message to\nstderr has given more detailed information.  Most likely this is due to a  missing  or\nexpired CRL or due to a network problem.\n\n"
                }
            ]
        },
        "OPTIONS": {
            "content": "dirmngr-client may be called with the following options:\n\n\n",
            "subsections": [
                {
                    "name": "--version",
                    "content": "Print  the program version and licensing information.  Note that you cannot abbreviate\nthis command.\n\n",
                    "long": "--version"
                },
                {
                    "name": "--help, -h",
                    "content": "Print a usage message summarizing the most useful command-line options.  Note that you\ncannot abbreviate this command.\n\n",
                    "flag": "-h",
                    "long": "--help"
                },
                {
                    "name": "--quiet, -q",
                    "content": "Make the output extra brief by suppressing any informational messages.\n\n",
                    "flag": "-q",
                    "long": "--quiet"
                },
                {
                    "name": "-v",
                    "content": "",
                    "flag": "-v"
                },
                {
                    "name": "--verbose",
                    "content": "Outputs  additional information while running.  You can increase the verbosity by giv‐\ning several verbose commands to dirmngr, such as ‘-vv’.\n\n\n--pem  Assume that the given certificate is in PEM (armored) format.\n\n\n--ocsp Do the check using the OCSP protocol and ignore any CRLs.\n\n",
                    "long": "--verbose"
                },
                {
                    "name": "--force-default-responder",
                    "content": "When checking using the OCSP protocol, force the use of the  default  OCSP  responder.\nThat is not to use the Reponder as given by the certificate.\n\n\n--ping Check whether the dirmngr daemon is up and running.\n\n",
                    "long": "--force-default-responder"
                },
                {
                    "name": "--cache-cert",
                    "content": "Put  the given certificate into the cache of a running dirmngr.  This is mainly useful\nfor debugging.\n\n",
                    "long": "--cache-cert"
                },
                {
                    "name": "--validate",
                    "content": "Validate the given certificate using dirmngr's  internal  validation  code.   This  is\nmainly useful for debugging.\n\n",
                    "long": "--validate"
                },
                {
                    "name": "--load-crl",
                    "content": "This  command expects a list of filenames with DER encoded CRL files.  With the option\n--url URLs are expected in place of filenames and they are loaded  directly  from  the\ngiven location.  All CRLs will be validated and then loaded into dirmngr's cache.\n\n",
                    "long": "--load-crl"
                },
                {
                    "name": "--lookup",
                    "content": "Take  the  remaining  arguments and run a lookup command on each of them.  The results\nare Base-64 encoded outputs (without header lines).  This may be used to retrieve cer‐\ntificates  from  a  server.  However the output format is not very well suited if more\nthan one certificate is returned.\n\n",
                    "long": "--lookup"
                },
                {
                    "name": "--url",
                    "content": "",
                    "long": "--url"
                },
                {
                    "name": "-u",
                    "content": "",
                    "flag": "-u"
                },
                {
                    "name": "--local",
                    "content": "",
                    "long": "--local"
                },
                {
                    "name": "-l",
                    "content": "",
                    "flag": "-l"
                },
                {
                    "name": "--squid-mode",
                    "content": "Run dirmngr-client in  a  mode  suitable  as  a  helper  program  for  Squid's  exter‐‐\nnalacltype option.\n\n\n",
                    "long": "--squid-mode"
                }
            ]
        },
        "SEE ALSO": {
            "content": "dirmngr(8), gpgsm(1)\n\nThe  full  documentation  for  this tool is maintained as a Texinfo manual.  If GnuPG and the\ninfo program are properly installed at your site, the command\n\ninfo gnupg\n\nshould give you access to the complete manual including a menu structure and an index.\n\n\n\n\n\n\nGnuPG 2.2.27                                 2020-12-21                            DIRMNGR-CLIENT(1)",
            "subsections": []
        }
    },
    "summary": "dirmngr-client - Tool to access the Dirmngr services",
    "flags": [
        {
            "flag": "",
            "long": "--version",
            "arg": null,
            "description": "Print the program version and licensing information. Note that you cannot abbreviate this command."
        },
        {
            "flag": "-h",
            "long": "--help",
            "arg": null,
            "description": "Print a usage message summarizing the most useful command-line options. Note that you cannot abbreviate this command."
        },
        {
            "flag": "-q",
            "long": "--quiet",
            "arg": null,
            "description": "Make the output extra brief by suppressing any informational messages."
        },
        {
            "flag": "-v",
            "long": null,
            "arg": null,
            "description": ""
        },
        {
            "flag": "",
            "long": "--verbose",
            "arg": null,
            "description": "Outputs additional information while running. You can increase the verbosity by giv‐ ing several verbose commands to dirmngr, such as ‘-vv’. --pem Assume that the given certificate is in PEM (armored) format. --ocsp Do the check using the OCSP protocol and ignore any CRLs."
        },
        {
            "flag": "",
            "long": "--force-default-responder",
            "arg": null,
            "description": "When checking using the OCSP protocol, force the use of the default OCSP responder. That is not to use the Reponder as given by the certificate. --ping Check whether the dirmngr daemon is up and running."
        },
        {
            "flag": "",
            "long": "--cache-cert",
            "arg": null,
            "description": "Put the given certificate into the cache of a running dirmngr. This is mainly useful for debugging."
        },
        {
            "flag": "",
            "long": "--validate",
            "arg": null,
            "description": "Validate the given certificate using dirmngr's internal validation code. This is mainly useful for debugging."
        },
        {
            "flag": "",
            "long": "--load-crl",
            "arg": null,
            "description": "This command expects a list of filenames with DER encoded CRL files. With the option --url URLs are expected in place of filenames and they are loaded directly from the given location. All CRLs will be validated and then loaded into dirmngr's cache."
        },
        {
            "flag": "",
            "long": "--lookup",
            "arg": null,
            "description": "Take the remaining arguments and run a lookup command on each of them. The results are Base-64 encoded outputs (without header lines). This may be used to retrieve cer‐ tificates from a server. However the output format is not very well suited if more than one certificate is returned."
        },
        {
            "flag": "",
            "long": "--url",
            "arg": null,
            "description": ""
        },
        {
            "flag": "-u",
            "long": null,
            "arg": null,
            "description": ""
        },
        {
            "flag": "",
            "long": "--local",
            "arg": null,
            "description": ""
        },
        {
            "flag": "-l",
            "long": null,
            "arg": null,
            "description": ""
        },
        {
            "flag": "",
            "long": "--squid-mode",
            "arg": null,
            "description": "Run dirmngr-client in a mode suitable as a helper program for Squid's exter‐‐ nalacltype option."
        }
    ],
    "examples": [],
    "see_also": [
        {
            "name": "dirmngr",
            "section": "8",
            "url": "https://www.chedong.com/phpMan.php/man/dirmngr/8/json"
        },
        {
            "name": "gpgsm",
            "section": "1",
            "url": "https://www.chedong.com/phpMan.php/man/gpgsm/1/json"
        },
        {
            "name": "DIRMNGR-CLIENT",
            "section": "1",
            "url": "https://www.chedong.com/phpMan.php/man/DIRMNGR-CLIENT/1/json"
        }
    ]
}