Hi,
I want to install kernel-2.6.18-128.1.10.el5.src.rpm which I can get via:
    wget ftp://linux.fnal.gov/linux/scientific/53/SRPMS/vendor/\
kernel-2.6.18-128.1.10.el5.src.rpm

But before I do an rpm --install, I would like to verify the integrity 
of the rpm.  How do I do this?

I've found the following web site:
    http://rhn.redhat.com/errata/RHSA-2009-0473.html
which shows:
SRPMS:
kernel-2.6.18-128.1.10.el5.src.rpm   5784eab8bcaf859f66d0fc09d37870f8

and I assume there is some way to see the associated number on my system 
  if the .src.rpm is valid. The md5sum command produces:

# md5sum kernel-2.6.18-128.1.10.el5.src.rpm
e505dd681cf83a06410e86f6301feed8  kernel-2.6.18-128.1.10.el5.src.rpm

The right number of digits, but the wrong ones.

I've noticed the rpmsign command, but it produces:
# rpmsign -K kernel-2.6.18-128.1.10.el5.src.rpm
kernel-2.6.18-128.1.10.el5.src.rpm: (SHA1) DSA sha1 md5 (GPG) NOT OK 
(MISSING KEYS: GPG#82fd17b2)

But, maybe I don't know how to use it (it's the first time I have).

Any help is appreciated.

BTW, I've also downloaded the same kernel-2.6.18-128.1.10.el5.src.rpm 
file from other sites and I get consistent, but different md5sums.


Thanks,
Ron