The file containing the checksum and signature for
grml96-full_2014.11.iso reads:

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256

ea7204ed77fa3df3a4ed68e3b8e2ad6f95d5242d  grml96-full_2014.11.iso
-----BEGIN PGP SIGNATURE-----
...

The second line is wrong, as this is actually a SHA1 hash. Not a big
thing, but confused me a little. Don't know if the other checksum files
contain the same error.