diff --git a/.gitignore b/.gitignore
index 13070ee..3c2aa2a 100644
--- a/.gitignore
+++ b/.gitignore
@@ -1,2 +1,2 @@
-SOURCES/subscription-manager-1.28.25.tar.gz
-SOURCES/subscription-manager-cockpit-1.28.25.tar.gz
+SOURCES/subscription-manager-1.28.28.tar.gz
+SOURCES/subscription-manager-cockpit-1.28.28.tar.gz
diff --git a/.subscription-manager.metadata b/.subscription-manager.metadata
index 047e7af..c76738d 100644
--- a/.subscription-manager.metadata
+++ b/.subscription-manager.metadata
@@ -1,2 +1,2 @@
-18352c8068518f21d0eb6e4cb30cfb04b9e958a1 SOURCES/subscription-manager-1.28.25.tar.gz
-fdc552e702d711046fd2ecb2d334c6f717eb3dc5 SOURCES/subscription-manager-cockpit-1.28.25.tar.gz
+508a506483c7e6454e3b898489c40896227c9d59 SOURCES/subscription-manager-1.28.28.tar.gz
+179f0e65324800141f3dd652518d3a91c451309a SOURCES/subscription-manager-cockpit-1.28.28.tar.gz
diff --git a/SPECS/subscription-manager.spec b/SPECS/subscription-manager.spec
index 77e3c60..4719d15 100644
--- a/SPECS/subscription-manager.spec
+++ b/SPECS/subscription-manager.spec
@@ -248,7 +248,7 @@
 %global use_rhsm_icons 0%{use_cockpit} || 0%{use_rhsm_gtk}
 
 Name: subscription-manager
-Version: 1.28.25
+Version: 1.28.28
 Release: 1%{?dist}
 Summary: Tools and libraries for subscription and repository management
 %if 0%{?suse_version}
@@ -887,10 +887,6 @@ find %{buildroot} -name \*.py* -exec touch -r %{SOURCE0} '{}' \;
     %endif
 %endif
 
-%if %{defined centos}
-sed -e '/^enabled=/ s/1/0/' -i %{buildroot}%{_sysconfdir}/dnf/plugins/subscription-manager.conf
-%endif
-
 # base/cli tools use the gettext domain 'rhsm', while the
 # gnome-help tools use domain 'subscription-manager'
 %files -f rhsm.lang
@@ -1495,6 +1491,48 @@ gtk-update-icon-cache -f %{_datadir}/icons/hicolor &>/dev/null || :
 %endif
 
 %changelog
+* Tue Feb 15 2022 Christopher Snyder <csnyder@redhat.com> 1.28.28-1
+- Revert "1887600: Use updated cert with SHA-256 algorithm"
+  (csnyder@redhat.com)
+- environments: fix usage of injection (ptoscano@redhat.com)
+
+* Mon Feb 14 2022 Christopher Snyder <csnyder@redhat.com> 1.28.27-1
+- Update translation files (noreply@weblate.org)
+- 1887600: Use updated cert with SHA-256 algorithm (jhnidek@redhat.com)
+- 2046516: register: do not check environments w/ activation keys
+  (ptoscano@redhat.com)
+- No-op refactor of RegisterCommand._process_environments()
+  (ptoscano@redhat.com)
+- environments: fix list for account in env-less org (ptoscano@redhat.com)
+- 1994056: Multiple environment capability (wpoteat@redhat.com)
+
+* Thu Feb 10 2022 Christopher Snyder <csnyder@redhat.com> 1.28.26-1
+- 2049441: [1.28] Cockpit registration dialog: enable insights by default
+  (jhnidek@redhat.com)
+- Reverting disabling AutoAttach() and PoolAttach() in SCA mode
+  (jhnidek@redhat.com)
+- 2046302: Apply Conscious language initiative changes (mhorky@redhat.com)
+- ENT-4671: Improve debug logging to stdout (mhorky@redhat.com)
+- Fix indentation of ProductStatus. (jhnidek@redhat.com)
+- 2028969: Do not try to load compliance status from cache (jhnidek@redhat.com)
+- Fixed last bits related to updated D-Bus Register method.
+  (jhnidek@redhat.com)
+- Refactoring of temporary disablement of dir watchers. (jhnidek@redhat.com)
+- Ignore enable_content option in RegisterWithActivationKeys()
+  (jhnidek@redhat.com)
+- Use benefits of enable_content in cockpit plugin. (jhnidek@redhat.com)
+- Added enable_content option to Register() D-Bus method (jhnidek@redhat.com)
+- Added refresh() method to entitlement service (jhnidek@redhat.com)
+- Fixed issue with status cache (jhnidek@redhat.com)
+- Add information about content access mode to consumer (jhnidek@redhat.com)
+- cockpit: fix system installation of subscription-manager
+  (ptoscano@redhat.com)
+- New extraction for translatable strings (ptoscano@redhat.com)
+- Adding permissive coverage publishing (jmolet@redhat.com)
+- WIP: try to not use junit('coverage.xml') (jhnidek@redhat.com)
+- 2024573: [1.28] Do not delete cache of content_access during refresh
+  (jhnidek@redhat.com)
+
 * Thu Jan 06 2022 Christopher Snyder <csnyder@redhat.com> 1.28.25-1
 - syspurpose: handle users w/o organizations (ptoscano@redhat.com)
 - service-level: drop useless check (ptoscano@redhat.com)