Getting error "This Organization's subscription manifest has expired. Please import a new manifest"

Solution Verified - Updated

Environment

  • Red Hat Satellite 6.x

Issue

  • While navigating to Subscription page on the Red Hat Satellite WebUI, getting error:

    This Organization's subscription manifest has expired. Please import a new manifest.
    
  • Does Satellite 6 manifests expire?

Resolution

  • Re-import the same manifest from Red Hat Hybrid Cloud console and upload it to Red Hat Satellite server by following the below steps:

     1. Follow the procedure described in [Chapter 2. Exporting and downloading a manifest](https://docs.redhat.com/en/documentation/subscription_central/1-latest/html-single/creating_and_managing_manifests_for_a_connected_satellite_server/index#proc-exporting-downloading-manifest-satellite-connected) to export and download the manifest.
    
     2. Follow the procedure in [2.1. Importing a Red Hat subscription manifest into Satellite Server](https://docs.redhat.com/en/documentation/red_hat_satellite/6.18/html/managing_content/managing_red_hat_subscriptions_content-management#Importing_a_Red_Hat_Subscription_Manifest_into_Server_content-management) to import the manifest into the Satellite server.
    
    **NOTE:** It should not be attempted to delete the manifest from the **Red Hat Satellite** GUI by clicking on the `Delete` button on the Manifest page or else the client hosts will get unsubscribed from the Red Hat Satellite server.
    

For more KB articles/solutions related to Red Hat Satellite 6.x Manifest Issues, please refer to the Consolidated Troubleshooting Article for Red Hat Satellite 6.x Manifest Issues

Root Cause

Please refer to How and when does a Red Hat Satellite manifest certificate expire?

Diagnostic Steps

  1. Using the following command to identify the ID of the target organization for which you want to check the manifest expiry date:

    # hammer organization list
    

    Note down the organization ID.

  2. Replace <ORG_ID> in the following one-liner with the organization ID obtained from step (1) above, then run the command on the Satellite server:

    # foreman-rake console << EORAKE
    org = Organization.find(<ORG_ID>)
    File.write('/tmp/cert_upstream.pem', org.owner_details['upstreamConsumer']['idCert']['cert'])
    EORAKE
    
  3. Run the following command to display the issuance and expiry date of the manifest:

    # rct cat-cert /tmp/cert_upstream.pem | grep -i Date
    

    The output will look like:

    Start Date: 2023-08-14 08:52:54+00:00
    End Date: 2024-08-14 09:52:54+00:00
    

    The End Date is the manifest's expiry date.

SBR
Product(s)
Components
Category

This solution is part of Red Hat’s fast-track publication program, providing a huge library of solutions that Red Hat engineers have created while supporting our customers. To give you the knowledge you need the instant it becomes available, these articles may be presented in a raw and unedited form.