diff --git a/tests/scripts/thread-cert/Cert_5_5_02_LeaderReboot.py b/tests/scripts/thread-cert/Cert_5_5_02_LeaderReboot.py
index 86edbebb8..9bafbf258 100755
--- a/tests/scripts/thread-cert/Cert_5_5_02_LeaderReboot.py
+++ b/tests/scripts/thread-cert/Cert_5_5_02_LeaderReboot.py
@@ -117,14 +117,13 @@ class Cert_5_5_2_LeaderReboot(thread_cert.TestCase):
 
         # Step 4: Router_1 MUST attempt to reattach to its original partition by
         # sending MLE Parent Requests to the All-Routers multicast
-        # address (FFxx::xx) with a hop limit of 255.
-        _rpkts.filter_mle_cmd(MLE_PARENT_REQUEST).must_next().must_verify(
-            lambda p: {MODE_TLV, CHALLENGE_TLV, SCAN_MASK_TLV, VERSION_TLV} == set(p.mle.tlv.type))
+        # address (FFxx::xx) with a hop limit of 255. MUST make two separate attempts
+        for i in range(1, 3):
+            _rpkts.filter_mle_cmd(MLE_PARENT_REQUEST).must_next().must_verify(
+                lambda p: {MODE_TLV, CHALLENGE_TLV, SCAN_MASK_TLV, VERSION_TLV} == set(
+                    p.mle.tlv.type) and p.mle.tlv.scan_mask.r == 1 and p.mle.tlv.scan_mask.e == 1)
         lreset_start = _rpkts.index
 
-        # Step 5: Leader MUST NOT respond to the MLE Parent Requests
-        _lpkts.filter_mle_cmd(MLE_PARENT_RESPONSE).must_not_next()
-
         # Step 6:Router_1 MUST attempt to attach to any other Partition
         # within range by sending a MLE Parent Request.
         _rpkts.filter_mle_cmd(MLE_PARENT_REQUEST).must_next().must_verify(
@@ -134,6 +133,9 @@ class Cert_5_5_2_LeaderReboot(thread_cert.TestCase):
         # Step 3: The Leader MUST stop sending MLE advertisements.
         leader_pkts.range(lreset_start, lreset_stop).filter_mle_cmd(MLE_ADVERTISEMENT).must_not_next()
 
+        # Step 5: Leader MUST NOT respond to the MLE Parent Requests
+        leader_pkts.range(lreset_start, lreset_stop).filter_mle_cmd(MLE_PARENT_RESPONSE).must_not_next()
+
         # Step 7: Take over leader role of a new Partition and
         # begin transmitting MLE Advertisements
         with _rpkts.save_index():
@@ -147,7 +149,7 @@ class Cert_5_5_2_LeaderReboot(thread_cert.TestCase):
 
         # Step 9: The Leader MUST send properly formatted MLE Parent
         # Requests to the All-Routers multicast address
-        _lpkts.filter_mle_cmd(MLE_PARENT_REQUEST).must_next().must_verify(
+        _lpkts.range(lreset_stop).filter_mle_cmd(MLE_PARENT_REQUEST).must_next().must_verify(
             lambda p: {MODE_TLV, CHALLENGE_TLV, SCAN_MASK_TLV, VERSION_TLV} == set(p.mle.tlv.type))
 
         # Step 10: Router_1 MUST send an MLE Parent Response