ivepkg is a package manager with a focus on homebuilt distributions like Linux From Scratch. Therefore, ivepkg has no repository or network abilities, but is specialized on installing tarballs to a system. Its key features are an easy-to-use database (sqlite3) and a sha1 checksum of every installed file. These make it possible to know which files have been altered (for example, by a malicious attack).
checkroot is an openSUSE equivalent of debsums. It enables retrieval of fingerprint updates online, allowing trusted verification of a root filesystem. This prevents a cracker from hiding his traces from "rpm --verify -a". If the verification fails, checkroot can download the package header containing the md5sums online. Alternatively, all md5sums can be fetched online (if you mistrust some of the fingerprints/private keys the locally stored md5sums are signed with).