An affiliate of al-Qaeda used a US$50-million ransom payment from a Gulf state to finance an unprecedented rebel offensive that captured a military base in northern Mali, a United Nations report says.