WoluTools

DCP Structure & Hash Validator

DCP Structure: check a DCP package before venue delivery.

Turn a bounded DCP package into an exact asset, relationship and hash-coverage report.

START HEREChoose documentsZIP, TAR, TAR.GZ
Maximum
5 files · 1 GB total
File handling
Draft 2 hours · encrypted result 24 hours
FREE3 jobs a dayFiles up to 10 MB
PROUp to 200 jobs a day€12.99/month or €89.99/year
See plans

Larger files need Pro. Failed jobs are never counted.

  • Prepared example is free
  • 3 free jobs a day
  • Cancel anytime
EXAMPLE RESULTSample data
Declared assets · 18
Relationships · Complete
All declared package hashes and relationships passHTML, protected asset inventory CSV, composition JSON, sample evidence and manifest
Declared assets
18
Hashes verified
18/18
Relationships
Complete
Formats, limits & file handling
Works with
ZIP, TAR, TAR.GZ
Limit
5 files · 1 GB total
You receive
HTML, protected asset inventory CSV, composition JSON, sample evidence and manifest
File handling
Draft 2 hours · encrypted result 24 hours

Turn a bounded DCP package into an exact asset, relationship and hash-coverage report.

THREE CLEAR STEPS

From your documents to a usable result.

  1. 01
    Add your input

    Limits and supported formats are visible before you begin.

  2. 02
    Review the result

    Check the preview, findings or artwork before you download.

  3. 03
    Download

    Use your free job, plan or credits. Failed jobs are never counted.

Prepared result preview

See the decision before sharing a real file.

Turn a bounded DCP package into an exact asset, relationship and hash-coverage report. This prepared example uses fictional data and the same evidence structure as the server export.

✓
Nothing is uploadedPublic demo only

Cinema delivery

All declared package hashes and relationships pass

Essence playback and full cinema-server compatibility are not tested; the output is structure and hash evidence, not cinema certification.

Actual prepared coverage: Unencrypted DCP structure and streamed PKL hashes · 1 GB input ceiling

  • PassPackingList hashes complete18 declared assets matched streamed SHA-256 values
  • PassComposition relationships resolvedASSETMAP, CPL and PKL references map to present assets
  • BoundaryEssence playback not testedMXF/J2K decode and cinema-server playback remain outside this validator
Declared assets
18
Hashes verified
18/18
Relationships
Complete
Show the verified package

HTML, protected asset inventory CSV, composition JSON, sample evidence and manifest

Engine digital-cinema-qc-v4 · rules smpte-interOp-dcp-package-authentication-2026-08-31

One focused workflow

From bounded input to evidence you can review

  1. Add the source.Accepted inputs are ZIP, TAR, TAR.GZ. The visible limit is 5 files · 1 GB total.
  2. Confirm the job.Every assigned source number, selected filename and setting stays visible before the confirmed SHA-256 input hash is accepted. Product-specific mappings remain explicit settings rather than guessed roles.
  3. Process in isolation.A one-job networkless sandbox receives only this job and cannot access accounts, queues, encryption keys or other customer storage.
  4. Review exact findings.Verify ASSETMAP, CPL and PKL relationships plus declared asset hashes for an unencrypted DCP package within the visible 1 GB input limit.
  5. Download the evidence.HTML, protected asset inventory CSV, composition JSON, sample evidence and manifest Every output hash is covered by the coordinator-created manifest.

What this product does not claim

Essence playback and full cinema-server compatibility are not tested; the output is structure and hash evidence, not cinema certification.

Clear answers

DCP Structure & Hash Validator FAQ

What can I upload?

An unencrypted DCP delivered as ZIP, TAR or TAR.GZ, up to 5 files and 1 GB in total. Encrypted packages and their keys are out of scope.

Which relationships are checked?

ASSETMAP, CPL and PKL are read against each other, so that every asset a composition references is present and every declared asset is accounted for.

How are the hashes verified?

Each asset is streamed and its SHA-256 value compared with the value the PackingList declares. The report states how many of the declared hashes matched.

Does the validator play the picture and sound?

No. Essence decoding and playback on a particular cinema server are not tested, so a damaged frame inside an otherwise correctly hashed asset stays invisible here.

Is a clean result an approval for delivery?

No. It is structure and hash evidence for the package you supplied. It is not cinema certification and not a promise that the venue server will ingest the show.

Available now

Check a DCP package before venue delivery.

Inspect the fictional result now. Your own files run here without an account: 3 free jobs a day, or up to 200 a day with Pro.