The format for a SHA512 checksum looks like this apache-lucy-incubating-0.2.0.tar.gz: 435CE486 CC933673 6A8D6526 C0B31526 8091B64F 637472E5 70D16513 3EB54054 E4617DEB E6DA4F3B 3C4842D3 CA4D3B8A 5B904960 ECF9EF88 3CDD9416 A8E8CF19 MD5 would be apache-lucy-incubating-0.2.0.tar.gz: B5 53 85 B2 09 E0 E5 92 93 7D 4B 3A F2 27 01 A7 I'm not sure whether the format is properly documented anywhere - will search - but this is a format that can be verified with a gpg command line as well.