diff --git a/Dockerfile.cli-stack.rh b/Dockerfile.cli-stack.rh
index 91b679855..b8ad8892c 100644
--- a/Dockerfile.cli-stack.rh
+++ b/Dockerfile.cli-stack.rh
@@ -18,10 +18,10 @@ RUN git update-index --assume-unchanged Dockerfile.rekor-cli.rh && \
     make Makefile.swagger && \
     make -f Build.mak cross-platform
 
-FROM --platform=linux/amd64   quay.io/securesign/rekor-cli@sha256:2d6400f3d9ee4db96e5f9d3bc2499500e35e0dc0399df5090a41ff9fde4ac729 AS build-amd64
-FROM --platform=linux/arm64   quay.io/securesign/rekor-cli@sha256:adf057ecf3b9220adfd0ac4aeca581652539f49604bb572581cfc2089fc75e0a AS build-arm64
-FROM --platform=linux/ppc64le quay.io/securesign/rekor-cli@sha256:2223653550b5b997b079ba5c454cc0ad1d979194f92555b9d2132dcd0e281608 AS build-ppc64le
-FROM --platform=linux/s390x   quay.io/securesign/rekor-cli@sha256:de3e98edbc00e2d565949afd3273e4e427a67ac43fb3a3960a05cdea88873216 AS build-s390x
+FROM --platform=linux/amd64   quay.io/securesign/rekor-cli@sha256:bb1567d154b63a3586a755d06ba5a7b59f64e246fa2a74dd7256357a1ea8cd22 AS build-amd64
+FROM --platform=linux/arm64   quay.io/securesign/rekor-cli@sha256:752944b3ab943b4f8aa498dc1c6145f15e3f98e8fdbbfafb034a4a122f2804a3 AS build-arm64
+FROM --platform=linux/ppc64le quay.io/securesign/rekor-cli@sha256:1a93b782402c2505f6992148ee916a62181c69941520a75b636cf9fd2d33bea4 AS build-ppc64le
+FROM --platform=linux/s390x   quay.io/securesign/rekor-cli@sha256:271965bf8c235f75f2330a0e2b65b6f7486fbc87c086f32248bbc46289bb030a AS build-s390x
 
 FROM registry.redhat.io/ubi9/go-toolset:9.8-1790174511@sha256:0a4666f7a4eb0644c97a73cba198eb268691b270d97831822689e7a2088f87be AS packager
 USER root