diff --git a/racket/collects/pkg/private/stage.rkt b/racket/collects/pkg/private/stage.rkt
index 8f3fd17975..52bc8d457b 100644
--- a/racket/collects/pkg/private/stage.rkt
+++ b/racket/collects/pkg/private/stage.rkt
@@ -11,6 +11,7 @@
          net/url
          file/untgz
          file/unzip
+         file/private/check-path
          openssl/sha1
          json
          net/git-checkout
@@ -412,6 +413,7 @@
                   pkg-name)
                  'directory))
               (define (path-like f)
+                (check-unpack-path 'MANIFEST f)
                 (build-path package-path f))
               (define (url-like f)
                 (if (and (pair? (url-path pkg-url))