thanks to Peter and Mike! it was indeed the wrong checksumprg. with sha1sum it worked :) could have saved me more than 5GB of download volume ;)