diff --git a/bundle/manifests/cert-manager-operator.clusterserviceversion.yaml b/bundle/manifests/cert-manager-operator.clusterserviceversion.yaml
index 61233c6f6..cd06fef92 100644
--- a/bundle/manifests/cert-manager-operator.clusterserviceversion.yaml
+++ b/bundle/manifests/cert-manager-operator.clusterserviceversion.yaml
@@ -276,7 +276,7 @@ metadata:
     capabilities: Seamless Upgrades
     categories: Security
     console.openshift.io/disable-operand-delete: "true"
-    containerImage: openshift.io/cert-manager-operator:latest
+    containerImage: registry.stage.redhat.io/cert-manager/cert-manager-operator-rhel9@sha256:ebb988080e93a733111f641cda75c30fb773509e9e35d928fe41262871d0fa68
     createdAt: 2023-03-03T00:00:00
     features.operators.openshift.io/cnf: "false"
     features.operators.openshift.io/cni: "false"
@@ -788,17 +788,17 @@ spec:
                 - name: OPERATOR_NAME
                   value: cert-manager-operator
                 - name: RELATED_IMAGE_CERT_MANAGER_WEBHOOK
-                  value: quay.io/jetstack/cert-manager-webhook:v1.19.6
+                  value: registry.stage.redhat.io/cert-manager/jetstack-cert-manager-rhel9@sha256:9144fd826b65687970a6a88a4e7e50cc9b4bf4b76d3c427f1de6899e6a79b7fa
                 - name: RELATED_IMAGE_CERT_MANAGER_CA_INJECTOR
-                  value: quay.io/jetstack/cert-manager-cainjector:v1.19.6
+                  value: registry.stage.redhat.io/cert-manager/jetstack-cert-manager-rhel9@sha256:9144fd826b65687970a6a88a4e7e50cc9b4bf4b76d3c427f1de6899e6a79b7fa
                 - name: RELATED_IMAGE_CERT_MANAGER_CONTROLLER
-                  value: quay.io/jetstack/cert-manager-controller:v1.19.6
+                  value: registry.stage.redhat.io/cert-manager/jetstack-cert-manager-rhel9@sha256:9144fd826b65687970a6a88a4e7e50cc9b4bf4b76d3c427f1de6899e6a79b7fa
                 - name: RELATED_IMAGE_CERT_MANAGER_ACMESOLVER
-                  value: quay.io/jetstack/cert-manager-acmesolver:v1.19.6
+                  value: registry.stage.redhat.io/cert-manager/jetstack-cert-manager-acmesolver-rhel9@sha256:5e42c5983bf93e3d0f31de628dc7d96ceec6136cdcb5f9e22dd29cc5193951a0
                 - name: RELATED_IMAGE_CERT_MANAGER_ISTIOCSR
-                  value: quay.io/jetstack/cert-manager-istio-csr:v0.16.0
+                  value: registry.stage.redhat.io/cert-manager/cert-manager-istio-csr-rhel9@sha256:ed4f77362a05546f5809ae3675f5c5e8093453e7785f580f93348419900c1f06
                 - name: RELATED_IMAGE_CERT_MANAGER_TRUST_MANAGER
-                  value: quay.io/jetstack/trust-manager:v0.20.3
+                  value: registry.stage.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:d0834b140e53cb2b96d30f227b0c7dcab3463eeab80049df608582c45c792a82
                 - name: OPERAND_IMAGE_VERSION
                   value: 1.19.6
                 - name: ISTIOCSR_OPERAND_IMAGE_VERSION
@@ -812,7 +812,7 @@ spec:
                 - name: TRUSTED_CA_CONFIGMAP_NAME
                 - name: CLOUD_CREDENTIALS_SECRET_NAME
                 - name: UNSUPPORTED_ADDON_FEATURES
-                image: openshift.io/cert-manager-operator:latest
+                image: registry.stage.redhat.io/cert-manager/cert-manager-operator-rhel9@sha256:ebb988080e93a733111f641cda75c30fb773509e9e35d928fe41262871d0fa68
                 imagePullPolicy: IfNotPresent
                 name: cert-manager-operator
                 ports:
@@ -909,17 +909,13 @@ spec:
   provider:
     name: Red Hat
   relatedImages:
-  - image: quay.io/jetstack/cert-manager-webhook:v1.19.6
-    name: cert-manager-webhook
-  - image: quay.io/jetstack/cert-manager-cainjector:v1.19.6
-    name: cert-manager-ca-injector
-  - image: quay.io/jetstack/cert-manager-controller:v1.19.6
-    name: cert-manager-controller
-  - image: quay.io/jetstack/cert-manager-acmesolver:v1.19.6
+  - image: registry.stage.redhat.io/cert-manager/jetstack-cert-manager-rhel9@sha256:9144fd826b65687970a6a88a4e7e50cc9b4bf4b76d3c427f1de6899e6a79b7fa
+    name: ""
+  - image: registry.stage.redhat.io/cert-manager/jetstack-cert-manager-acmesolver-rhel9@sha256:5e42c5983bf93e3d0f31de628dc7d96ceec6136cdcb5f9e22dd29cc5193951a0
     name: cert-manager-acmesolver
-  - image: quay.io/jetstack/cert-manager-istio-csr:v0.16.0
+  - image: registry.stage.redhat.io/cert-manager/cert-manager-istio-csr-rhel9@sha256:ed4f77362a05546f5809ae3675f5c5e8093453e7785f580f93348419900c1f06
     name: cert-manager-istiocsr
-  - image: quay.io/jetstack/trust-manager:v0.20.3
+  - image: registry.stage.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:d0834b140e53cb2b96d30f227b0c7dcab3463eeab80049df608582c45c792a82
     name: cert-manager-trust-manager
   replaces: cert-manager-operator.v1.19.1
   version: 1.19.2
diff --git a/config/manager/manager.yaml b/config/manager/manager.yaml
index 0487c3dff..2e970017a 100644
--- a/config/manager/manager.yaml
+++ b/config/manager/manager.yaml
@@ -75,17 +75,17 @@ spec:
             - name: OPERATOR_NAME
               value: cert-manager-operator
             - name: RELATED_IMAGE_CERT_MANAGER_WEBHOOK
-              value: quay.io/jetstack/cert-manager-webhook:v1.19.6
+              value: registry.stage.redhat.io/cert-manager/jetstack-cert-manager-rhel9@sha256:9144fd826b65687970a6a88a4e7e50cc9b4bf4b76d3c427f1de6899e6a79b7fa
             - name: RELATED_IMAGE_CERT_MANAGER_CA_INJECTOR
-              value: quay.io/jetstack/cert-manager-cainjector:v1.19.6
+              value: registry.stage.redhat.io/cert-manager/jetstack-cert-manager-rhel9@sha256:9144fd826b65687970a6a88a4e7e50cc9b4bf4b76d3c427f1de6899e6a79b7fa
             - name: RELATED_IMAGE_CERT_MANAGER_CONTROLLER
-              value: quay.io/jetstack/cert-manager-controller:v1.19.6
+              value: registry.stage.redhat.io/cert-manager/jetstack-cert-manager-rhel9@sha256:9144fd826b65687970a6a88a4e7e50cc9b4bf4b76d3c427f1de6899e6a79b7fa
             - name: RELATED_IMAGE_CERT_MANAGER_ACMESOLVER
-              value: quay.io/jetstack/cert-manager-acmesolver:v1.19.6
+              value: registry.stage.redhat.io/cert-manager/jetstack-cert-manager-acmesolver-rhel9@sha256:5e42c5983bf93e3d0f31de628dc7d96ceec6136cdcb5f9e22dd29cc5193951a0
             - name: RELATED_IMAGE_CERT_MANAGER_ISTIOCSR
-              value: quay.io/jetstack/cert-manager-istio-csr:v0.16.0
+              value: registry.stage.redhat.io/cert-manager/cert-manager-istio-csr-rhel9@sha256:ed4f77362a05546f5809ae3675f5c5e8093453e7785f580f93348419900c1f06
             - name: RELATED_IMAGE_CERT_MANAGER_TRUST_MANAGER
-              value: quay.io/jetstack/trust-manager:v0.20.3
+              value: registry.stage.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:d0834b140e53cb2b96d30f227b0c7dcab3463eeab80049df608582c45c792a82
             - name: OPERAND_IMAGE_VERSION
               value: 1.19.6
             - name: ISTIOCSR_OPERAND_IMAGE_VERSION
@@ -99,7 +99,7 @@ spec:
             - name: TRUSTED_CA_CONFIGMAP_NAME
             - name: CLOUD_CREDENTIALS_SECRET_NAME
             - name: UNSUPPORTED_ADDON_FEATURES
-          image: controller:latest
+          image: registry.stage.redhat.io/cert-manager/cert-manager-operator-rhel9@sha256:ebb988080e93a733111f641cda75c30fb773509e9e35d928fe41262871d0fa68
           imagePullPolicy: IfNotPresent
           name: cert-manager-operator
           securityContext: