H'ok. I'm doing this from memory on the fly, so .......
That !<arch> at the start of the file is the signature for an AR archive.
Debian archives also show this sig (since they are also ar files). There are other differences in their format but they should also open with the ar command.
There are some other archive types that start similarly (old SUN system, if I recall right), but you are not likely to see any of them as IPK files.
They should open with the Linux ar (there is a windows/DOS ar that does NOT use the same format & won't work).
Since Stu says the MD5 sums are not matching (& the other info given), I'd bet the files on the server are bunged.
The gz header starts with hex 1F 0B. You should NOT see the debian-binary, data.tar or control.tar strings in plain text (its compression encoded).
The tar files should start with ./ hex 2E 2F & a file name (debian-binary, data.tar.gz or such). You should also see the ustar string about 0100 h bytes down.
An more details I'd have to dig out my old notes to remember (G).