Invariably this error is caused by a mismatch between your provisioning profile and your distribution certificate. Typically, Apple allows an organization to have two distribution certificates and when a provisioning profile is created - it is associated with one or the other. In order to correctly sign an ipa, the distribution certificate AND private key on the Mac where the signing is
occurring must match that which was selected when the provisioning profile was created.
To check which distribution certificate you have access your keychain
Go to Xcode's Organizer and click on all the Profiles, check if they are valid. Xcode throw up warning text if say, something is missing in Keychain.