pyrpm-manage manages signed packages, old releases and versions, and repositories. It is mainly there to help with cleaning up repositories full of many releases of the same package and then making an RPM repository usable with yum on RHEL-based distributions. It runs fairly well on Debian if you install RPM tools and python libraries.
checkroot is an openSUSE equivalent of debsums. It enables retrieval of fingerprint updates online, allowing trusted verification of a root filesystem. This prevents a cracker from hiding his traces from "rpm --verify -a". If the verification fails, checkroot can download the package header containing the md5sums online. Alternatively, all md5sums can be fetched online (if you mistrust some of the fingerprints/private keys the locally stored md5sums are signed with).
rpm-depend can easily find packages fitting the capabilities required by a given package. It works only on directories with RPMs like mounted media for now. RPMs in a given directory are recorded in caches to enable quick lookup on the next query. It includes the ability to omit packages installed in the current system (i.e. list only missing packages) and resolve package dependencies recursively (i.e. if A depends on B, resolve B's dependencies as well).
yumpkgs is a tool to help people download the right set of RPM packages needed to update another computer that can't download the packages itself, for whatever reason. After the packages have been downloaded, they can be transferred to the other computer by way of a flash drive or portable disc. yumpkgs produces a list (downloads.list) with a .bat script that can be run on Windows to do the downloading.