I assume a number of results have been proven conditionally on the Riemann hypothesis, of course in number theory and maybe in other fields. What are the most relevant you know?
It would also be nice to include consequences of the generalized Riemann hypothesis (but specify which one is assumed).
I gave a talk on this topic a few months ago, so I assembled a list then which could be appreciated by a general mathematical audience. I'll reproduce it here. (Edit: I have added a few more examples to the end of the list, starting at item m, which are meaningful to number theorists but not necessarily to a general audience.)
Let's start with three applications of RH for the Riemann zeta-function only.
a) Sharp estimates on the remainder term in the prime number theorem: $\pi(x) = {\text{Li}}(x) + O(\sqrt{x}\log x)$, where ${\text{Li}}(x)$ is the logarithmic integral (the integral from 2 to $x$ of $1/\log t$).
b) Comparing $\pi(x)$ and ${\text{Li}}(x)$. All the numerical data shows $\pi(x)$ < ${\text{Li}}(x)$, and Gauss thought this was always true, but in 1914 Littlewood used the Riemann hypothesis to show the inequality reverses infinitely often. In 1933, Skewes used RH to show the inequality reverses for some $x$ below 10^10^10^34. In 1955 Skewes showed without using RH that the inequality reverses for some $x$ below 10^10^10^963. Maybe this was the first example where something was proved first assuming RH and later proved without RH.
c) Gaps between primes. In 1919, Cramer showed RH implies $p_{k+1} - p_k = O(\sqrt{p_k}\log p_k)$, where $p_k$ is the $k$th prime. (A conjecture of Legendre is that there's always a prime between $n^2$ and $(n+1)^2$ -- in fact there should be a lot of them -- and this would imply $p_{k+1} - p_k = O(\sqrt{p_k})$. This is better than Cramer's result, so it lies deeper than a consequence of RH. Cramer also conjectured that the gap is really $O((\log p_k)^2)$.)
Now let's move on to applications involving more zeta and $L$-functions than just the Riemann zeta-function. Note that typically we will need to assume GRH for infinitely many such functions to say anything.
d) Chebyshev's conjecture. In 1853, Chebyshev tabulated the primes which are $1 \bmod 4$ and $3 \bmod 4$ and noticed there are always at least as many $3 \bmod 4$ primes up to $x$ as $1 \bmod 4$ primes. He conjectured this was always true and also gave an analytic sense in which there are more $3 \bmod 4$ primes: $$ \lim_{x \rightarrow 1^{-}} \sum_{p \not= 2} (-1)^{(p+1)/2}x^p = \infty. $$ Here the sum runs over odd primes $p$. In 1917, Hardy-Littlewood and Landau (independently) showed this second conjecture of Chebyshev's is equivalent to GRH for the $L$-function of the nontrivial character mod 4. (In 1994, Rubinstein and Sarnak used simplicity and linear independence hypotheses on zeros of $L$-functions to say something about Chebyshev's first conjecture, but as the posted question asked only about consequences of RH and GRH, I leave the matter there and move on.)
e) The Goldbach conjecture (1742). The "even" version says all even integers $n \geq 4$ are a sum of 2 primes, while the "odd" version says all odd integers $n \geq 7$ are a sum of 3 primes. For most mathematicians, the Goldbach conjecture is understood to mean the even version, and obviously the even version implies the odd version. The odd version turns out to be a consequence of GRH. In 1923, assuming all Dirichlet $L$-functions are nonzero in a right half-plane ${\text{Re}}(s) \geq 3/4 - \varepsilon$, where $\varepsilon$ is fixed (independent of the $L$-function), Hardy and Littlewood showed the odd Goldbach conjecture is true for all sufficiently large odd $n$. In 1937, Vinogradov proved the same result without needing GRH as a hypothesis. In 1997, Deshouillers, Effinger, te Riele, and Zinoviev showed GRH implies the odd Goldbach conjecture is true for all odd $n \geq 7$. So GRH completely settles the odd Goldbach conjecture.
Update: This is now an obsolete application of GRH since the odd Goldbach Conjecture was proved by Harald Helfgott in 2013 without needing GRH as a hypothesis. An account of the current status of Helfgott's work is here.
f) Polynomial-time primality tests. By results of Ankeny (1952) and Montgomery (1971), GRH for all Dirichlet $L$-functions implies that the first nonmember of every proper subgroup of the unit group $({\mathbf Z}/m{\mathbf Z})^\times$ is $O((\log m)^2)$, where the $O$-constant is independent of $m$. In 1985, Bach showed GRH for all Dirichlet $L$-functions implies the constant in that $O$-estimate can be taken to be 2. That is, GRH for all Dirichlet $L$-functions implies that each proper subgroup of $({\mathbf Z}/m{\mathbf Z})^\times$ is missing some integer from 1 to $2(\log m)^2$. Put differently, GRH for all Dirichlet $L$-functions implies that if a subgroup of $({\mathbf Z}/m{\mathbf Z})^\times$ contains all positive integers below $2(\log m)^2$ then the subgroup is the whole unit group mod $m$. (To understand one way that GRH has an influence on that upper bound, if all the nontrivial zeros of all Dirichlet $L$-functions have ${\text{Re}}(s) \leq 1 - \varepsilon$ then the first nonmember of every proper subgroup of $({\mathbf Z}/m{\mathbf Z})^\times$ is $O((\log m)^{1/\varepsilon})$. Set $\varepsilon = 1/2$ to get the previous result I stated that uses GRH.) In 1976, Gary Miller introduced a deterministic primality test that he could prove runs in polynomial time using GRH for all Dirichlet $L$-functions. (Part of the test involves deciding if a subgroup of units mod $m$ is proper or not.) Shortly afterwards, Solovay and Strassen described a different primality test using Jacobi symbols. GRH for Dirichlet $L$-functions implies their test runs in polyomial time, and the subgroups of units mod $m$ occurring for their test contain $-1$, so the proof that their test runs in polynomial time "only" needs GRH for Dirichlet $L$-functions of even characters. (Solovay and Strassen described their test as a probabilistic test rather than a deterministic test, so they didn't mention GRH one way or the other.)
In 2002 Agrawal, Kayal, and Saxena created a new primality test that they could prove runs in polynomial time without needing GRH. This is a nice example showing how GRH guides mathematicians in the direction of what should be true and then people tried to find a proof of those results by methods not involving GRH.
g) Euclidean rings of integers. In 1973, Weinberger showed that GRH for all Dedekind zeta-functions implies that every ring of algebraic integers with an infinite unit group (so ignoring $\mathbf Z$ and the ring of integers of imaginary quadratic fields) is Euclidean if it has class number 1. As a special case, in concrete terms, if $d$ is a positive integer that is not a perfect square then a ring ${\mathbf Z}[\sqrt{d}]$ that is a unique factorization domain must be Euclidean. The same theorem is true for rings of $S$-integers: an infinite unit group plus class number $1$ plus GRH for zeta-functions of all number fields implies the ring is Euclidean. Progress has been made by Ram Murty and others in the direction of proving class number 1 and infinite unit group implies Euclidean for rings of $S$-integers without needing GRH, and as a striking special case let's consider ${\mathbf Z}[\sqrt{14}]$. It has class number 1 (which must have been known to Gauss in the early 19th century, in the language of quadratic forms) and an infinite unit group, so it should be Euclidean. This particular real quadratic ring was first proved to be Euclidean only in 2004 (by M. Harper). So $\mathbf Z[\sqrt{14}]$ is a ring that was known to have unique factorization for over 100 years before it was proved to be Euclidean.
h) Artin's primitive root conjecture. In 1927, Artin conjectured that each nonzero integer $a$ that is not $-1$ or a perfect square is a generator of $({\mathbf Z}/p{\mathbf Z})^\times$ for infinitely many primes $p$, and in fact for a positive proportion of such $p$. As a special case, taking $a = 10$, this says for primes $p$ the unit fraction $1/p$ has decimal period $p-1$ for a positive proportion of $p$. (For each prime $p$ other than $2$ and $5$, the decimal period for $1/p$ is a factor of $p-1$, so this special case is saying the largest possible period is realized infinitely often in a precise sense.) In 1967, Hooley showed GRH for zeta-functions of number fields implies Artin's primitive root conjecture. More precisely, Artin's primitive root conjecture for $a$ follows from GRH for the zeta-functions of all the number fields $\mathbf Q(\sqrt[n]{a},\zeta_n)$ where $n$ runs over the squarefree positive integers. In 1984, R. Murty and Gupta showed Artin's primitive root conjecture is true for infinitely many $a$ without having to use GRH, but their proof couldn't pin down even one specific $a$ for which Artin's primitive root conjecture is true. In 1986, Heath-Brown showed without using GRH that Artin's primitive root conjecture is true for all prime values of $a$ with at most two exceptions (and of course there should not be any exceptions). Without using GRH, no definite $a$ is known for which Artin's conjecture is true.
i) First prime in an arithmetic progression. If $\gcd(a,m) = 1$ then there are infinitely many primes $p \equiv a \bmod m$. When does the first one appear, as a function of $m$? In 1934, Chowla showed GRH implies the first prime $p \equiv a \bmod m$ is $O(m^2(\log m)^2)$. In 1944, Linnik showed without GRH that the bound is $O(m^L)$ for some universal exponent $L$. The latest choice for $L$ (Xylouris, 2009) without using GRH is $L = 5.2$.
j) Gauss' class number problem. Gauss (1801) conjectured in the language of quadratic forms that there are only finitely many imaginary quadratic fields with class number 1. (He actually conjectured more precisely that the 9 known examples are the only ones, but for what I want to say the weaker finiteness statement is simpler.) In 1913, Gronwall showed this is true if the $L$-functions of all imaginary quadratic Dirichlet characters have no zeros in some common strip $1- \varepsilon < {\text{Re}}(s) < 1$. That is weaker than GRH (we only care about $L$-functions of a restricted collection of characters), but it is a condition like GRH for infinitely many $L$-functions. In 1933, Deuring and Mordell showed Gauss' conjecture is true if the ordinary RH (for the Riemann zeta-function) is false, and then in 1934 Heilbronn showed Gauss' conjecture is true if GRH is false for some Dirichlet $L$-function of an imaginary quadratic character. Since Gronwall proved Gauss' conjecture is true when GRH is true for the Riemann zeta-function and the Dirichlet $L$-functions of all imaginary quadratic Dirichlet characters and Deuring--Mordell--Heilbronn proved Gauss' conjecture is true when GRH is false for at least one of those functions, Gauss' conjecture is true by baby logic. In 1935, Siegel proved Gauss' conjecture is true without using GRH, and in the 1950s and 1960s Baker, Heegner, and Stark gave separate proofs of Gauss' precise "only 9" conjecture without using GRH.
k) Missing values of a quadratic form. Lagrange (1772) showed every positive integer is a sum of four squares. However, not every integer is a sum of three squares: $x^2 + y^2 + z^2$ misses all $n \equiv 7 \bmod 8$. Legendre (1798) showed a positive integer is a sum of three squares iff it is not of the form $4^a(8k+7)$. This can be phrased as a local-global problem: $x^2 + y^2 + z^2 = n$ is solvable in integers iff the congruence $x^2 + y^2 + z^2 \equiv n \bmod m$ is solvable for all $m$. More generally, the same local-global phenomenon applies to the three-variable quadratic form $x^2 + y^2 + cz^2$ for all integers $c$ from 2 to 10 except $c = 7$ and $c = 10$. What happens for these two special values? Ramanujan looked at $c = 10$. He found 16 values of $n$ for which there is local solvability (that is, we can solve $x^2 + y^2 + 10z^2 \equiv n \bmod m$ for all $m$) but not global solvability (no integral solution for $x^2 + y^2 + 10z^2 = n$). Two additional values of $n$ were found later, and in 1990 Duke and Schulze-Pillot showed that local solvability implies global solvability except for (ineffectively) finitely many positive integers $n$. In 1997, Ono and Soundararajan showed GRH implies the 18 known exceptions are the only ones.
l) Euler's convenient numbers. Euler called an integer $n \geq 1$ convenient if each odd integer greater than 1 that has a unique representation as $x^2 + ny^2$ in positive integers $x$ and $y$, and which moreover has $(x,ny) = 1$, is a prime number. (These numbers were convenient for Euler to use to prove certain numbers that were large in his day, like $67579 = 229^2 + 2\cdot 87^2$, are prime.) Euler found 65 convenient numbers below 10000 (the last one being 1848). In 1934, Chowla showed there are finitely many convenient numbers. In 1973, Weinberger showed there is at most one convenient number not in Euler's list, and that GRH for $L$-functions of all quadratic Dirichlet characters implies that Euler's list of convenient numbers is complete. What he needed from GRH is the lack of real zeros in the interval $(53/54,1)$.
m) Removing a condition in the Brauer-Siegel theorem. In 1947, Brauer proved the Brauer-Siegel theorem for sequences of number fields $K_n$ such that (i) $[K_n:\mathbf Q]/\log |{\rm disc}(K_n)| \to 0$ as $|{\rm disc}(K_n)| \to \infty$ and (ii) $K_n$ is Galois over $\mathbf Q$. If the zeta-functions $\zeta_{K_n}(s)$ all satisfy GRH (what is actually needed is no real zero in $(1/2,1)$ for those zeta-functions) then we can drop condition (ii). That is, GRH implies the Brauer-Siegel theorem holds for sequences of number fields $K_n$ fitting condition (i).
n) Lower bounds on root discriminants. In 1975, Odlyzko showed GRH for zeta-functions of number fields implies a lower bound on root discriminants of number fields: $$ |{\rm disc}(K)|^{1/n} \geq (94.69...)^{r_1/n}(28.76...)^{2r_2/n} + o(1) $$ as $n = [K:\mathbf Q] \to \infty$. (The lower bound was improved later to $136^{r_1/n}34.5^{2r_2/n}$ for sufficiently large $n$.) Building on ideas of Stark, he also showed that GRH for zeta-functions of number fields implies there are only finitely many CM number fields with a given class number (a big generalization of the known fact that only finitely many imaginary quadratic fields have any particular class number).
o) Lower bounds on class numbers. In 1990, Louboutin showed GRH for zeta-functions of imaginary quadratic fields (what is really needed is the lack of real zeros in $(1/2,1)$ for these zeta-functions) implies the lower bound $h(\mathbf Q(\sqrt{-d})) \geq (\pi/(3e))\sqrt{d}/\log d$ for imaginary quadratic fields with discirminant $-d$. The point here is the explicit constant factor $\pi/(3e)$. (Hecke had shown such a lower bound with a "computable constant" $c$ in place of $\pi/(3e)$ but he did not compute the constant.) Without GRH, lower bounds for $h(\mathbf Q(\sqrt{-d}))$ are on the order of $\log d$, which is far smaller than $\sqrt{d}/\log d$. For example, Louboutin's GRH-based lower bound shows if $h(\mathbf Q(\sqrt{-d})) \leq 100$ then $d \leq $ 18,916,898. To put this 8-digit upper bound in perspective, when Watkins determined all imaginary quadratic fields with class number up to 100 in 2004, he used lower bounds on $h(\mathbf Q(\sqrt{-d}))$ that do not depend on GRH and the upper bound of his search space for $d$ was $e^{298368000}$, a number with 129,579,576 digits. Just the exponent in that upper bound on $d$ is greater than the upper bound on $d$ coming from GRH.
p) Proof of André-Oort conjecture. In 2014, Klingler and Yafaev showed GRH for zeta-functions of CM number fields implies the André-Oort conjecture. Daw and Orr gave another proof also using the same version of GRH.
Update: This is now an obsolete application of GRH since the André-Oort conjecture has been proved without GRH. See here.
q) Class number calculations. In 2015, J. C. Miller showed that GRH implies the class number $h_p^+$ of the real cyclotomic field $\mathbf Q(\zeta_p)^{+}$ for prime $p$ is $1$ for all $p$ from 157 to 241 except $h_{163}^+ = 4$, $h_{191}^{+} = 11$, and $h_{229}^+ = 3$.
r) Elliptic curve rank values. In 2019, Klagsbrun, Sherman, and Weigandt used GRH for $L$-functions of elliptic curves and for zeta-functions of number fields to prove that the elliptic curve over $\mathbf Q$ found by Elkies in 2006 with 28 independent rational points has rank 28.
Update: In 2024, Elkies and Klagsbrun announced the discovery of an elliptic curve over $\mathbf Q$ with 29 independent rational points, and its rank is 29 assuming GRH. See here.
(Jeffrey C. Lagarias) The following is equivalent to RH. Let $H_n = \sum\limits_{j=1}^n \frac{1}{j}$ be the $n$-th harmonic number. For each $n \ge 1$ $$\sum\limits_{d\mid n} d \le H_n + \exp (H_n) \log (H_n),$$ with equality only for $n = 1.$ (An Elementary Problem Equivalent to the Riemann Hypothesis. See also OEIS A057641.)
Many class group computations are sped up tremendously by assuming the GRH. As I understand it this is done by computing upper bounds on the discriminants of potential abelian extensions. See this survey by Odlyzko for more details
http://archive.numdam.org/ARCHIVE/JTNB/JTNB_1990__2_1/JTNB_1990__2_1_119_0/JTNB_1990__2_1_119_0.pdf
This is built into SAGE.
sage: J=JonesDatabase()
sage: NFs=J.unramified_outside([2,3])
sage: time RHCNs = [K.class_number(proof=False) for K in NFs]
CPU times: user 7.05 s, sys: 0.07 s, total: 7.13 s
Wall time: 7.15 s
sage: time CNs = [K.class_number() for K in NFs]
CPU times: user 20.19 s, sys: 0.24 s, total: 20.43 s
Wall time: 20.96 s
As for GRH, the prettiest one I know is this complete solution of the odd Goldbach conjecture (that every number greater than 5 is a sum of 3 primes).
Deshouillers, J.-M.; Effinger, G.; te Riele, H.; Zinoviev, D., A complete Vinogradov 3-primes theorem under the Riemann hypothesis, Electron. Res. Announc. Am. Math. Soc. 3, 99-104 (1997). ZBL0892.11032.
I haven't seen this application mentioned:
The closed horocycle $\gamma_l$ of length $l$ of the modular surface equidistributes to the hyperbolic volume form $\omega$ when $l\to +\infty$, and RH is equivalent to the error term: $$\frac{1}{l} \int_{\gamma_l} f = \int f \omega + o(l^{-3/4+\epsilon})$$ for every smooth function with compact support.
This is due to Don Zagier. https://people.mpim-bonn.mpg.de/zagier/files/scanned/EisensteinRiemannZeta/eisenstein-zeta-978-3-662-00734-1_10.pdf
Verjovsky has another reformulation of the Riemann hypothesis in terms of convergence of measures. https://projecteuclid.org/journals/kodai-mathematical-journal/volume-17/issue-3/Discrete-measures-and-the-Riemann-hypothesis/10.2996/kmj/1138040054.full
From Wikipedia's page on the consequences of the Riemann hypothesis
"Riemann's explicit formula for the number of primes less than a given number in terms of a sum over the zeros of the Riemann zeta function says that the magnitude of the oscillations of primes around their expected position is controlled by the real parts of the zeros of the zeta function. [...] the Riemann hypothesis is equivalent to the "best possible" bound for the error of the prime number theorem."
A consequence of the RH is
$$|\pi(x)-\mathrm{li}(x)|<\frac{1}{8\pi}\sqrt{x}\log x\quad\forall x\geq 2657$$
where $\mathrm{li}(x)$ is the logarithmic integral, $\pi(x)$ is the prime counting function and $\log x$ is the natural logarithm. Another consequence is
$$|\psi(x)-x|<\frac{1}{8\pi}\sqrt{x}\log^2 x\quad\forall x\geq73.2$$
Where $\psi(x)$ is Chebyshev's second function (not to be confused with the digamma function). Yet another implication is that forall $x\geq 2$ there is a prime $p$ satisfying
$$x-\frac{4}{\pi}\sqrt{x}{\log x}<p\leq x$$
If the Riemann hypothesis is true, then the gap between a prime $p$ and its successor prime is $O(\sqrt{p}\log p)$.
The Riemann hypothesis implies
$$-\sum_{k=1}^{\infty}\frac{(-x)^k}{(k-1)!\zeta(2k)}=O\left(x^{\frac{1}{4}+\epsilon}\right)\text{ holds }\forall\epsilon>0$$
Source:Wikipedia
The grand Riemann hypothesis implies
$$\lim_{x\to 1^{-}}\sum_{p\geq 2}(-1)^{(p+1)/2}x^p=+\infty$$
Here is a good article about its consequences.